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(54) Electronic ticket, electronic wallet, and information terminal 



(57) A network electronic ticket 1003 is provided in 
an electronic ticket 1000. Start page data 1016, a ticket 
owner secret key 1017, an electronic ticket possession 
certificate 1018, and a network service program 1019 
are provided in the network electronic ticket 1003, the 
network service program 1019 controls various types of 



processing and an electronic ticket storage terminal, 
and the ticket owner secret key 1017 and the electronic 
ticket possession certificate 1018 are used for authen- 
tication processing with an information providing appa- 
ratus on a network, whereby it is made possible to con- 
nect to the network from the electronic ticket itself and 
receive information service. 
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Description 

BACKGROUND OF THE INVENTION 

[0001] This invention relates to electronic tickets in 5 
electronic form into which various tickets of an event, a 
movie, a train, an airplane, etc., are converted, an elec- 
tronic wallet for keeping the electronic ticket, an infor- 
mation terminal for storing the electronic wallet, an in- 
formation providing apparatus for providing information 10 
for the information terminal, and an electronic ticket sys- 
tem comprising the components, and in particular to an 
electronic ticket provided with a function of receiving on- 
line information service. 

[0002] Hitherto, the following has been known as a *5 
system for purchasing reserved seat tickets of various 
events, public performance, or conveyances: 
[0003] FIG. 26 shows the configuration of a general 
system for purchasing reserved seat tickets (tickets) in 
a related art. A ticket issuing terminal 2602 for perform- 20 
ing ticket issuing processing is installed in a ticket shop 
2601 and is connected to a center system 2604 of a tick- 
et issuer 2603 over a communication line 2605. 
[0004] To purchase a reserved seat ticket of an event, 
a public performance, a conveyance, or the like, a per- 25 
sonal consumer 2600 first goes to the ticket shop 2601, 
tells a salesperson that he or she wants to buy a ticket, 
and requests the salesperson to issue a ticket. At this 
time, the personal consumer 2600 can select the seat 
type (S grade seat, A grade seat, etc., on a concert); 30 
however, generally the ticket shop 2601 does not pro- 
vide vacant seat information and thus often the personal 
consumer 2600 cannot select his or her desired seat. 
[0005] Next, the salesperson of the ticket shop 2601 
enters identification information of the desired ticket and 35 
the desired seat type in the ticket issuing terminal 2602 
and performs the ticket issuing operation. The ticket is- 
suing terminal 2602 transmits desired entry information 
(the identification information of the desired ticket and 
the desired seat type) to the center system 2604 of the *o 
ticket issuer 2603 over the communication line 2605. 
Upon reception of the information, the center system 
2604 returns ticket information 2607 of the ticket of the 
desired type containing acquired seat information in the 
desired seat type to the ticket issuing terminal 2602. 45 
Generally, the center system 2604 often selects the seat 
acquired at the time from among vacant seats uniquely 
or at random. 

[0006] The ticket issuing terminal 2602 prints the re- 
ceived ticket information 2607 on a specific pasteboard 50 
determined by the ticket issuer and outputs it as a ticket 
2606 (2610). The salesperson of the ticket shop 2610 
passes the issued ticket to the personal consumer 2600 
in exchange for cash 2608 and terminates selling the 
ticket. 55 
[0007] To enhance the added value of a ticket, for ex- 
ample, the ticket issuer 2603 attempts to construct a 
system wherein information concerning a ticket is open 
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to the public on a home page on the WWW and URL 
information of the home page is described on the ticket 
for enabling the customer to receive the information pro- 
viding service concerning the ticket. 
[0008] In this case, however, any other person than 
the ticket purchaser would have access to the home 
page, and the effect of enhancing the added value of 
the ticket is not sufficiently produced. 
[0009] Membership network service is known as in- 
formation providing service aiming only at specific (tick- 
et-purchasing) personal consumers with the described 
point remedied. 

[0010] FIG. 27 shows the system configuration of 
general information providing service aiming at specific 
personal consumers. A service provider 2701, which is 
a provider for providing information service, is connect- 
ed to an information server 2702 over a communication 
line 2705. The information server 2702 has a user man- 
agement database 2703 and an information database 
2704. 

[0011] To receive membership information providing 
service, first the personal consumer 2700 requests the 
service provider 2701 to register a user ID and a pass- 
word (2706). The service provider 2701 registers the us- 
er ID and the password in the user management data- 
base 2703 of the information server 2702 as the person- 
al consumer 2700 requests (2707), and notifies the per- 
sonal consumer 2700 that the user ID and the password 
have been registered (2708). 

[0012] To receive information service, the personal 
consumer 2700 registering the user ID and the pass- 
word accesses the information server 2702 and enters 
the user ID and the password (2709). The information 
server 2702 searches the user management database 
2703 for the entered user ID and password. If the infor- 
mation server 2702 checks that the corresponding user 
ID and password exist, it searches the information da- 
tabase 2704 for information desired by the personal 
consumer 2700 and provides information service 
(2710). 

[0013] However, the systems in the related arts in- 
volve the following problems: 

(1) The personal consumer must go to the ticket 
shop to purchase a ticket or reserve a reserved seat 
and takes time and effort and cost; 

(2) to receive information providing service aiming 
at specific (ticket-purchasing) personal consumers, 
the personal consumer needs to previously register 
authentication information of membership ID, pass- 
word, etc., in the service provider. To receive serv- 
ice, the personal consumer needs also to enter the 
membership ID and the password each time; the 
operation is cumbersome. 

(3) the service provider needs to provide a data- 
base, etc., for managing information of the regis- 
tered membership IDs, passwords, etc., and thus 
must bear the high administration cost; and 
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(4) if another person knows the registered member- 
ship ID and password of one person, it is made pos- 
sible for even a person purchasing no ticket to re- 
ceive provided service. 

5 

SUMMARY OF THE INVENTION 

[0014] It is therefore an object of the invention to pro- 
vide a system for putting various distributed tickets into 
electronic form and enabling the user to receive online 10 
information service based on the ticket to enhance the 
added value of the thicket and in particular to an elec- 
tronic ticket for enabling a personal consumer to enjoy 
convenience without the inconvenience of operation of 
purchasing a ticket and get service under the system 15 
and making it possible to maintain high safety of the sys- 
tem and carry out administration at low costs, an elec- 
tronic wallet for storing the electronic ticket, an informa- 
tion terminal for storing the electronic wallet, an infor- 
mation providing apparatus for supplying information to 20 
the information terminal, and the like. 
[0015] To the end, according to the invention, an elec- 
tronic ticket for receiving necessary permission or serv- 
ice from a provider and a network electronic ticket for 
accessing an information providing apparatus via a net- 25 
work are provided in a ticket, thereby making up a net- 
work-linked electronic ticket linked with the network. 
[0016] An electronic wallet comprises ticket storage 
means for storing the network-linked electronic ticket 
and information service reception means for receiving 30 
online information service from the information provid- 
ing apparatus using the network electronic ticket of the 
network-linked electronic ticket. 
[0017] Thus, it is made possible for the personal con- 
sumer to directly access the information server for pro- 35 
viding relevant information from the network-linked elec- 
tronic ticket and receive online information service; the 
convenience of the personal consumer is improved. 
[0018] It is made possible for the personal consumer 
to receive online information service by purchasing an *o 
electronic ticket, storing it in an electronic wallet, and 
possessing the electronic wallet; the convenience of the 
personal consumer is improved. 

BRIEF DESCRIPTION OF THE DRAWINGS « 

[0019] In the accompanying drawings: 

FIG. 1 is a system block diagram in one embodi- 
ment of the invention; 50 
FIG. 2 is an external view of a gate terminal in the 
embodiment of the invention; 
FIGS. 3 A to 3C are a front view, a rear view, and a 
side view of a mobile user terminal in the embodi- 
ment of the invention; 55 
FIG. 4 is a block diagram of the internal configura- 
tion of the mobile user terminal in the embodiment 
of the invention; 



FIG. 5 is a data structure drawing in the mobile user 
terminal in the embodiment of the invention; 
FIG. 6 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 7 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 8 is a chart of an electronic ticket checking 
processing procedure in the embodiment of the in- 
vention; 

FIG. 9 is a chart of a network service processing 
procedure in the embodiment of the invention; 
FIG. 10 is a data structure drawing of an electronic 
ticket in first, second, and fourth embodiments of 
the invention; 

FIG. 11 is a data structure drawing of messages in 
first, second, and fourth embodiments of the inven- 
tion; 

FIG. 12 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 13 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 14 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 15 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 16 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 17 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 18 is a drawing of screen display of the mobile 
user terminal in the embodiment of the invention; 
FIG. 19 is a chart of a procedure of acquiring a re- 
served seat in first, second, and fourth embodi- 
ments of the invention; 

FIG. 20 is a data structure drawing of messages in 
first, second, and fourth embodiments of the inven- 
tion; 

FIG. 21 is a data structure drawing of messages in 
the embodiment of the invention; 
FIG. 22 is a data structure drawing of messages in 
third and fourth embodiments of the invention; 
FIG. 23 is a chart of a procedure of acquiring a re- 
served seat in third and fourth embodiments of the 
invention; 

FIG. 24 is a data structure drawing of messages in 
third and fourth embodiments of the invention; 
FIG. 25 is a data structure drawing of an electronic 
ticket in third and fourth embodiments of the inven- 
tion; 

FIG. 26 is a block diagram to show the configuration 
of a system for selling reserved seat tickets (tickets) 
in a related art; 

FIG. 27 is a block diagram to show the system con- 
figuration of membership network service in a relat- 
ed art; 

FIGS. 28A and 28B are drawings to schematically 
show an electronic ticket and its use mode respec- 
tively in the embodiment of the invention; 
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FIGS. 29A and 29B are drawings to schematically 
show an electronic wallet and an information termi- 
nal respectively in the embodiment of the invention; 
FIG. 30 is a block diagram to show the configuration 
of an electronic wallet in first, second, and third em- 
bodiments of the invention; and 
FIG. 31 is a block diagram to show the configuration 
of an electronic wallet in the fourth embodiment of 
the invention. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0020] Referring now to the accompanying drawings, 
there are shown preferred embodiments of the inven- 
tion. The invention is not limited to the specific embod- 
iments and various modifications may be made without 
departing from the spirit of the invention. 

(First embodiment) 

[0021] In a network-linked electronic ticket system of 
an embodiment of the invention, personal consumers 
purchase various tickets of events, movies, trains, air- 
planes, etc., as electronic information via a network and 
use the tickets for the gate terminals installed in the tick- 
et gates of event places, movie theaters, stations, air- 
ports, etc. Only the ticket owners can receive provided 
information service related to the ticket via the network 
based on the tickets converted into the electronic infor- 
mation. 

[0022] Hereinafter, various tickets converted into the 
electronic information will be collectively called "elec- 
tronic tickets." The electronic ticket is electronic infor- 
mation having a negotiable securities character like a 
paper ticket and has a ticket function of receiving per- 
mission of entrance and provided commodity and serv- 
ice like a conventional ticket. The function of receiving 
online information service based on the electronic ticket 
is called "network electronic ticket." The substance of 
the network electronic ticket is an account for receiving 
online information service and/or program information 
for performing data processing to receive information 
service. The electronic ticket in the system of the em- 
bodiment, called "network-linked electronic ticket," has 
"electronic ticket" and "network electronic ticket," as 
shown in FIG. 28A. (The detailed data structure of the 
network-linked electronic ticket will be described later 
with reference to FIG. 10.) With the network-linked elec- 
tronic ticket, the electronic ticket is used with a ticket 
validator and the network electronic ticket is used to ac- 
cess a service server for receiving online information 
service, as shown in FIG. 28B. 
[0023] The system using the network-linked electron- 
ic ticket is called "network-linked electronic ticket sys- 
tem" and various services provided from the system by 
using the electronic ticket and the network electronic 
ticket are collectively called "network-linked electronic 



ticket service" and in particular, information service pro- 
vided using the network electronic ticket is called "net- 
work information service." 

[0024] The network-linked electronic ticket system 
5 comprises a mobile user terminal 1 00 having a function 
of purchasing and using an electronic ticket, a gate ter- 
minal 101 for performing automatic ticket checking of an 
electronic ticket, a service server 1 02 for issuing a ticket, 
an information server 103 for providing information for 
the mobile user terminal 100, a digital public network 
1 04 for providing data transmission paths on the net- 
work, and a radio telephone base station 1 05 for con- 
necting the mobile user terminal 1 00 to the digital public 
network 1 04, as shown in FIG. 1 , which is a system block 
diagram. 

[0025] The mobile user terminal 100 has a two-way 
wireless communication function of two channels of in- 
frared communications and digital radio telephone com- 
munications for conducting infrared communications 
with the gate terminal 101 and digital radio telephone 
communications through the base station 105. The mo- 
bile user terminal 100 also has an electronic ticket pur- 
chasing function, an electronic ticket use function, a 
function of reading information provided from the infor- 
mation server 103, and a function of receiving data from 
a GPS satellite and acquiring a position. 
[0026] The gate terminal 1 01 for performing automat- 
ic ticket checking of an electronic ticket has a two-way 
communication function of two channels of infrared 
communications and digital telephone communications 
for conducting infrared communications with the mobile 
user terminal 100 and digital radio telephone communi- 
cations through the digital public network 104. 
[0027] The service server 1 02 has an electronic ticket 
issuing function, a digital communication function, and 
a ticket issuing database. 

[0028] The information server 103 has a digital com- 
munication function, an information database, and an 
information retrieval (search) function. 
[0029] In FIG. 1 , numeral 106 denotes a transmission 
path of digital radio telephone communications between 
the mobile user terminal 100 and the base station 105, 
numeral 107 denotes a transmission path of infrared 
communications between the mobile user terminal 100 
and the gate terminal 1 01 , numeral 1 08 denotes a digital 
telephone communication line for connecting the gate 
terminal 101 and the digital public network 104, numeral 
1 09 denotes a digital communication line for connecting 
the base station 105 and the digital public network 104, 
numeral 110 denotes a digital communication line for 
connecting the service server 102 and the digital public 
network 104, and numeral 111 denotes a digital commu- 
nication line for connecting the information server 103 
and the digital public network 104. 
[0030] The following mode is assumed as the normal 
operation mode of the network-linked electronic ticket 
service: 

[0031] The service server 1 02 is installed in an event 
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company or a ticket issuing company. The information 
server 103 is installed in the event company, the ticket 
issuing company, or an independent organization en- 
trusted by the event company or the ticket issuing com- 
pany. More than one information server 1 03 may be pro- 5 
vided in a one-to-one correspondence with the informa- 
tion types. The gate terminal 101 is installed at the en- 
trance of an event place. The mobile user terminal 100 
is carried by the personal consumer. 
[0032] The network-linked electronic ticket service 
provided by the system enables the person purchasing 
an electronic ticket via the network to use the electronic 
ticket with the gate terminal 101 at the event place, etc., 
and only the owner of the electronic ticket to receive the 
provided information service related to the purchased 
electronic ticket via the network. 
[0033] Specifically, the user uses the mobile user ter- 
minal 100 to purchase a network-linked electronic ticket 
from the service server 102 and stores the purchased 
network-linked electronic ticket in the mobile user termi- 
nal 100 for management. To use the electronic mail of 
the network-linked electronic ticket, the user uses the 
mobile user terminal 100 to conduct data communica- 
tions with the gate terminal 101 for performing ticket 
checking processing of the electronic ticket stored in the 
mobile user terminal 100. To receive network informa- 
tion service with the network electronic mail of the net- 
work-linked electronic ticket, the user uses the mobile 
user terminal 100 to conduct data communications with 
the information server 103 for receiving authentication 
of the electronic ticket stored in the mobile user terminal 
100, then receives the desired provided information 
service. 

[0034] The means for holding and managing the net- 
work-linked electronic ticket in the mobile user terminal 
100 is called "electronic wallet" in imitation of the repre- 
sentation generally used in the electronic commerce 
field. The substance of the electronic wallet is applica- 
tion for holding and managing the network-linked elec- 
tronic ticket and receiving the network information serv- 
ice based on the network electronic ticket. FIG. 29A 
schematically shows the electronic wallet for holding 
and managing the network-linked electronic ticket and 
FIG. 29B schematically shows the mobile user terminal 
(information terminal) 1 00 for storing the electronic wal- 
let. 

[0035] The data communications between the com- 
ponents of the system to execute the network-linked 
electronic ticket service are conducted using the follow- 
ing transmission path or communication line: 
[0036] First, the mobile user terminal 1 00 conducts in- 
frared communications with the gate terminal over the 
transmission path 107, conducts digital telephone com- 
munications with the service server 102 by digital radio 
telephone via the transmission path 1 06, the base sta- 
tion 105, the digital communication line 109, the digital 
public network 104, and the digital communication line 
110, and conducts digital telephone communications 



with the information server 103 by digital radio tele- 
phone via the transmission path 106, the base station 
1 05, the digital communication line 1 09, the digital public 
network 104, and the digital communication line 111. 
[0037] The gate terminal 101 and the service server 
1 02 conduct digital data communications with each oth- 
er via the digital telephone communication line 108, the 
digital public network 104, and the digital communica- 
tion line 110. 

[0038] Next, the components making up the system 
will be discussed. 

[0039] First, the gate terminal 101 will be discussed. 
An outline of the gate terminal 101 will be given with 
reference to FIG. 2. 

[0040] FIG. 2 is an external view of the gate terminal 
101. In FIG. 2, numeral 200 denotes an infrared com- 
munication module for conducting infrared communica- 
tions with the mobile user terminal 100, numeral 201 de- 
notes a 640X480-pixel touch panel liquid crystal display 
(touch panel LCD), numeral 202 denotes a power 
switch, numeral 203 denotes a ten-digit keypad switch, 
numeral 204 denotes a menus switch for switching the 
touch panel LCD to a menu screen, numeral 205 de- 
notes a lock switch for locking display produced on the 
touch panel LCD and operation of the gate terminal 101 , 
and numeral 206 denotes a serial cable for connecting 
the infrared communication module 200 and the main 
body of the gate terminal 101. In addition, an RS-232C 
interface for connecting an external unit such as a gate 
opening/closing unit is placed on the rear side of the 
main body of the gate terminal 101. The infrared com- 
munication module 200 may be any other wireless com- 
munication module other than infrared communications, 
compatible with the communication function of the mo- 
bile user terminal 100. 

[0041] The operation mode of the gate terminal 101 
is roughly classified into a ticket checking mode for 
checking an electronic ticket for validity and a checked 
ticket setting mode for setting the valid electronic tickets 
to be checked. To change the operation mode of the 
gate terminal 101, the touch panel LCD 201 is set to a 
menu screen by pressing the menu switch 204 and any 
desired mode is selected by touching the screen. 
[0042] In the ticket checking mode, the gate terminal 
101 is placed in a state waiting for an electronic ticket 
to be shown by infrared communications. When the user 
uses the mobile user terminal 100 to show the electronic 
ticket stored in the electronic wallet, the shown electron- 
ic ticket is checked for validity, ticket checking process- 
ing information is exchanged with the mobile user ter- 
minal 100, and the result is displayed on the screen. The 
operator of the gate terminal 101 (merchant) permits or 
inhibits entrance of the user based on the ticket check- 
ing processing result displayed on the screen. If a gate 
opening/closing unit is connected to the gate terminal 
101 as an external unit, the gate is opened or closed 
based on the ticket checking processing result. 
[0043] The lock switch 205 is a switch used when the 
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operator (merchant) leaves the gate terminal 101, etc. 
The operation of the screen and the gate terminal 101 
is locked, whereby the gate terminal 101 is protected 
against illegal operation. Once the gate terminal 101 is 
locked by pressing the lock switch 205, it cannot be un- 5 
locked until a preset password is entered. 
[0044] In the checked ticket setting mode, code infor- 
mation specifying the valid electronic ticket to be set in 
the gate terminal is entered with the ten-digit keypad 
switches 203, whereby a program module for checking 10 
the specified valid electronic ticket (ticket checking mod- 
ule) is down loaded from the service server 102 and the 
valid electronic ticket to be checked is set. 
[0045] Next, the mobile user terminal 100 will be dis- 
cussed. 15 
[0046] FIGS. 3 A to 3C are a front view, a rear view, 
and a side view of the mobile user terminal 1 00 respec- 
tively. 

[0047] In FIG. 3A, numeral 300 denotes an infrared 
communication port (infrared communication module) 20 
for conducting infrared communications with the gate 
terminal 101, numeral 301 denotes an antenna for trans- 
mitting and receiving a radio wave of digital radio tele- 
phone, numeral 302 denotes a receiver speaker, numer- 
al 303 denotes a 120X1 60-pixel color liquid crystal dis- 25 
play (LCD), numeral 304 denotes a mode switch for 
changing the operation mode of the mobile user terminal 
100, numeral 305 denotes a conversation switch of dig- 
ital radio telephone, numeral 306 denotes a quit switch 
of digital radio telephone, numeral 307 denotes function 30 
switches, numeral 380 denotes a ten-digit keypad, nu- 
meral 309 denotes a power switch, and numeral 31 0 de- 
notes a microphone. Numeral 313 denotes a button for 
transmitting the ID information stored in the terminal by 
infrared communications, namely, an ID transmission 35 
button. 

[0048] Further, in FIG. 3B, numeral 311 denotes an 
execution switch for prompting for execution of process- 
ing involving user confirmation such as confirmation of 
payment or the transaction contents, numeral 312 de- *o 
notes a headset jack for connecting a headset, and nu- 
meral 315 is an antenna for receiving data from a GPS 
satellite. 

[0049] As shown in FIG. 3C, the mobile user terminal 
100 may comprise an IC card slot 314 into which an IC 45 
card is inserted. 

[0050] The mobile user terminal 1 00 provides the five 
operation modes of digital radio telephone mode, 
browser mode, electronic wallet mode, personal infor- 
mation management mode, and ID transmission mode. 50 
The digital radio telephone mode, the browser mode, 
the personal information management mode, and the ID 
transmission mode are changed by operating the mode 
switch 304. The electronic wallet mode is a mode for 
starting the operation of the electronic wallet and is 55 
called from the browser mode. FIG. 3A shows a screen 
on which an electronic ticket is displayed on the LCD in 
the browser mode. 
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[0051] In the digital radio telephone mode, the mobile 
user terminal 100 operates as a digital radio telephone 
based on a contract with a common carrier providing 
digital radio telephone service. In the browser mode, the 
mobile user terminal 100 displays general Internet ac- 
cess information on the LCD, displays more than one 
electronic ticket stored in the electronic wallet in the mo- 
bile user terminal 100 on the LCD, and displays on the 
LCD when service related to the electronic ticket (name- 
ly, network information service based on the network 
electronic ticket) and calls the electronic wallet mode 
and operates as the operation mode for using the elec- 
tronic ticket stored in the electronic wallet in the mobile 
user terminal 100 with the gate terminal 101 . In the per- 
sonal information management mode, the user's per- 
sonal information stored in the mobile user terminal 100 
is referenced and user-set information is set. The ID 
transmission mode is a mode for transmitting the ID in- 
formation stored in the mobile user terminal 100. 
[0052] To use the mobile user terminal 1 00, for exam- 
ple, to normally make a call, the user first operates the 
mode switch 304 to set the operation mode to the digital 
radio telephone mode, next enters a telephone number 
with the ten-digit keypad switches 308 and presses the 
conversation switch 305. Now, the user can make a call 
at the entered telephone number. 
[0053] To receive a normal incoming call at the mobile 
user terminal 100, the mobile user terminal 100 produc- 
es an incoming call sound regardless of the operation 
mode. In this case, the user can press the conversation 
switch 305 for automatically changing to the digital radio 
telephone mode and can receive the call. 
[0054] To use an electronic ticket to undergo ticket 
checking, first the user operates the mode switch 304 
to set the operation mode to the browser mode, and fur- 
ther calls the electronic wallet mode and selects the 
used ticket (displays the used electronic ticket on the 
LCD 303) with the function switch 307 (F1 or F2). Next, 
the user points the infrared communication port 300 at 
the gate terminal 101 installed at the entrance of the 
movie theater or the event place and presses the exe- 
cution switch 311. Now, the mobile user terminal 100 is 
changed to the electronic wallet mode, conducts infra- 
red communications with the gate terminal 101, ex- 
changes the ticket checking processing information, 
and performs ticket checking processing of the electron- 
ic ticket. 

[0055] In the ID transmission mode, the ID transmis- 
sion button 313 is validated. When the user presses the 
ID transmission button 313, the ID information stored in 
the terminal is transmitted by infrared communications. 
If the mobile user terminal 100 comprises the IC card 
slot 314 and an IC card is inserted therein, the ID infor- 
mation stored on the IC card is transmitted. 
[0056] Next, the internal configuration of the mobile 
user terminal 100 will be discussed. 
[0057] FIG. 4 is a block diagram of the mobile user 
terminal 100. 
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[0058] The mobile user terminal 100 comprises a 
CPU (central processing unit) 400 for processing trans- 
mission data and reception data and controlling other 
components in accordance with a program stored in 
ROM (read-only memory) 402, RAM (random access 5 
memory) 403 for storing the data to be processed by the 
CPU 400 and the data processed by the CPU 400, EEP- 
ROM (electrically erasable programmable read-only 
memory) 404, a display (LCD) 401 for displaying various 
pieces of information in the mobile user terminal 100, 
an infrared communication section (infrared communi- 
cation module) 407 for conducting infrared communica- 
tions with the gate terminal 101 , a digital radio telephone 
communication section 406 for conducting digital radio 
telephone communications with the base station 105, 
an antenna 301 for transmitting and receiving radio 
waves of digital radio telephones, a GPS computation 
section 405 provided by combining an antenna and a 
GPS receiver for receiving data from a GPS satellite and 
a GPS computer for analyzing the received data and 
finding position information such as coordinate informa- 
tion and time information, a voice input unit 408, a voice 
output unit 409, and a switch unit 410. The infrared com- 
munication module 407 may be any other wireless com- 
munication module other than infrared communications, 
compatible with the communication function of the gate 
terminal 101. 

[0059] The mobile user terminal 1 00 may comprise an 
IC card reader and an IC card in place of the EEPROM 
(electrically erasable programmable read-only memory) 
404. 

[0060] An electronic wallet program for purchasing, 
storing, and using an electronic ticket and a browser pro- 
gram for reading relevant information to the purchased 
electronic ticket are stored in the ROM 402. 
[0061] FIG. 5 is a schematic drawing of the data 
stored in the EEPROM 404. 

[0062] The EEPROM 404 contains a basic program 
area 500, a service data area 501, a user area 502, a 
work area 503, and a temporary area 504. 
[0063] The basic program area 500 stores updates of 
the programs stored in the ROM 402 of the mobile user 
terminal 100, a patch program, and an additional pro- 
gram. 

[0064] The user area 502 is an area that can be used 
as desired by the user, the work area 503 is a work area 
used for the CPU 400 of the mobile user terminal 100 
to execute a program, and the temporary area 504 is an 
area for temporarily storing information received by the 
mobile user terminal 100. The service data area 501 is 
an area for storing electronic ticket information, history 
information, etc. 

[0065] The service data area 501 stores personal in- 
formation 505, a user public key certificate 506, user- 
set information 507, telephone information 508, settle- 
ment account information 509, an electronic ticket list 
510, and a use history list 511. The personal information 
505 is information of the name, age, sex, etc., of the 
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user, the user public key certificate 506 is the public key 
certificate of the user, the user-set information 507 is 
user-set information concerning network-linked elec- 
tronic ticket service, the telephone information 508 is in- 
formation related to digital radio telephone such as tel- 
ephone number, the settlement account information 509 
is information of the settlement account registered by 
the user, the electronic ticket list 510 is list information 
of the electronic tickets owned by the user and the sub- 
stance of the data, and the use history list 511 is use 
history information of the network-linked electronic tick- 
et system. 

[0066] If the mobile user terminal 100 comprises the 
IC card slot 314, some or all of the above-described data 
is stored on an IC card. 

[0067] Next, the service server 1 02 and the informa- 
tion server 103 will be discussed. 
[0068] The service server 102 and the information 
server 103 are implemented as at least one or more 
computers. The service server 1 02 and the information 
server 103 are in institutes approved by the ticket issuer 
and may be the same terminal. 
[0069] The service server 102 owns a ticket issuing 
database for issuing tickets and a service server secret 
key for digital signature. The information server 103 
owns an information database, a service server certifi- 
cate, and a service server public key. 
[0070] FIG. 1 0 is a schematic drawing to show the da- 
ta structure of a network-linked electronic ticket. Here, 
the portions surrounded by double lines denote portions 
on which the electronic ticket issuer places a digital sig- 
nature. In FIG. 10, one network-linked electronic ticket 

1000 is made up of the four parts of an electronic ticket 
program 1001 , a shown electronic ticket (electronic tick- 
et in FIG. 28) 1002, a network electronic ticket (network 
electronic ticket in FIG. 28) 1003, and an electronic tick- 
et certificate 1004. The electronic ticket program 1001 
is information stimulating management of the electronic 
ticket status and the operation proper to the electronic 
ticket, the shown electronic ticket 1002 is information 
shown to the gate terminal 101 as information indicating 
the contents of the electronic ticket, the network elec- 
tronic ticket 1003 is "information necessary for connect- 
ing to the network and receiving information service 
from the network-linked electronic ticket," and the elec- 
tronic ticket certificate 1004 is the certificate of the elec- 
tronic ticket issued by the electronic ticket issuer and is 
information indicating that the electronic ticket is valid. 
[0071] One network-linked electronic ticket has six 
keys falling under four categories in public-key crypto- 
system. One category involves digital signature keys of 
electronic ticket, namely, an electronic ticket signature 
secret key 1007 stored in the electronic ticket program 

1 001 and an electronic ticket signature public key stored 
in the electronic ticket certificate 1004 as a secret key 
and its corresponding public key respectively. Another 
category involves an electronic ticket authentication se- 
cret key 1008 stored in the electronic ticket program 
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1001, used for electronic ticket authentication process- 
ing with the gate terminal 101. Another category in- 
volves a transaction terminal authentication public key 
1009 stored in the electronic ticket program 1001 , used 
for authentication processing of the gate terminal 101 5 
performed by the mobile user terminal 1 00. Another cat- 
egory involves a ticket owner secret key 1017 stored in 
the network electronic ticket 1003 and a ticket owner 
public key stored in an electronic ticket possession cer- 
tificate 1018 used for authentication processing of the to 
electronic ticket and the mobile user terminal 100 with 
the information server 103. 

[0072] The electronic ticket signature secret key 
1 007, the electronic ticket signature public key, the ticket 
owner secret key 1017, and the ticket owner public key 15 
are key pairs unique to each electronic ticket, and the 
electronic ticket authentication secret key 1008 and the 
transaction terminal authentication public key 1009 are 
keys unique to each electronic ticket type. The electron- 
ic ticket authentication public key and the transaction 20 
terminal authentication secret key corresponding to the 
electronic ticket authentication secret key 1008 and the 
transaction terminal authentication public key 1009 are 
set in the gate terminal 101. 

[0073] In FIG. 10, first the electronic ticket program 25 
1001 is made up of an electronic ticket status 1005, an 
electronic ticket property 1006, an electronic ticket sig- 
nature secret key 1007, an electronic ticket authentica- 
tion secret key 1008, a transaction terminal authentica- 
tion public key 1 009, and electronic ticket program data 30 
1010. 

[0074] The electronic ticket status 1005 is information 
indicating the status of the electronic mail and informa- 
tion indicating whether or not the electronic ticket is 
available. 35 
[0075] The electronic ticket property 1 006 information 
set optionally depending on the electronic ticket type. 
For example, if the electronic ticket is a coupon ticket, 
the remaining number of coupons is set in the electronic 
ticket property 1 006. Whenever one coupon is used, the *o 
remaining number of coupons is decremented by one 
and when the remaining number of coupons reaches 0, 
the status of the electronic ticket status 1 005 indicating 
whether or not the electronic ticket is available is set to 
"unavailable." 45 
[0076] The electronic ticket signature secret key 1 007 
is a secret key for the digital signature of the electronic 
ticket described above. Likewise, the electronic ticket 
authentication secret key 1008 is a secret key used for 
authentication processing of electronic ticket and the 50 
transaction terminal authentication public key 1009 is a 
public key used for authentication processing of the gate 
terminal 101. 

[0077] The electronic ticket program data 1010 is a 
program module for stipulating the operation proper to 55 
the electronic ticket and the electronic ticket program 
data 1010 and the electronic ticket property 1006 can 
be used in combination to define various types of elec- 
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tronic tickets and define various types of operation in 
processing with electronic tickets. 
[0078] Next, the shown electronic ticket 1 002 is made 
up of an electronic ticket code 1011, an electronic ticket 
ID 1 01 2, electronic ticket information 1 01 3, an electronic 
ticket issuer ID 1014, and reservation information 1015. 
A digital signature is placed by the electronic ticket is- 
suer on the electronic ticket code 1011, the electronic 
ticket ID 1012, the electronic ticket information 1013, 
and the electronic ticket issuer ID 1014. 
[0079] The electronic ticket code 1011 is code infor- 
mation indicating the type of electronic ticket. The elec- 
tronic ticket ID 1012 is identification information unique 
to each electronic ticket. The electronic ticket informa- 
tion 1013 is ASCII information indicating the contents of 
the electronic ticket; the title of the electronic ticket, the 
date and time, the place, the seat type, and the promot- 
er, and information as to whether or not the electronic 
ticket can be transferred to another person, and if the 
electronic ticket is a coupon ticket, use condition infor- 
mation of the number of coupons at the issuing time, 
etc., are described with added tag information indicating 
the type of information. 

[0080] The electronic ticket issuer ID 1014 is ID infor- 
mation indicating the electronic ticket issuer issuing the 
electronic ticket. 

[0081] The reservation information 1015 is informa- 
tion rewritten when a reserved seat is acquired in a con- 
veyance or an event place; information of the date and 
time, the seat number, etc., is set. 
[0082] Next, the network electronic ticket 1003 is 
made up of an electronic ticket ID 1012, start page data 
1 01 6, a ticket owner secret key 1 0 1 7, an electronic ticket 
possession certificate 1 01 8, a network service program 
1019, a bookmark list 1020, and a service status 1021. 
A digital signature is placed by the electronic ticket is- 
suer on the electronic ticket ID 1 01 2, the start page data 
1016, the ticket owner secret key 1017, the electronic 
ticket possession certificate 1 01 8, and the network serv- 
ice program 1019. 

[0083] The electronic ticket ID 1012 is identification 
information unique to each electronic ticket. 
[0084] The start page data 1016 is display information 
of the start page of network information service first dis- 
played as a network service menu when the network in- 
formation service is received from the electronic ticket 
(FIG. 13). Embedded in the display information are the 
names of the information services that can be received 
with the electronic ticket, the URL (uniform resource lo- 
cator) information of the information servers for provid- 
ing the information services, and the ID of each infor- 
mation server 103 (information server ID). Also embed- 
ded in the display information are scripts for calling pro- 
gram modules used for generating and processing mes- 
sages exchanged with the information server 103 for 
providing each information service. Each script calls 
each program module with the URL information as a pa- 
rameter. The URL information, the information server 
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IDs, and the scripts for program execution are described 
in the start page data 1016 in a markup language such 
as HTML, XML, or WML 

[0085] The ticket owner secret key 1017 is a secret 
key used for authentication processing with the informa- 
tion server 103. 

[0086] The electronic ticket possession certificate 
1 01 8 is issued by the service server 1 02 when the elec- 
tronic ticket is purchased and is made up of the ID of the 
user terminal 100 through wnich the electronic ticket is 
purchased, electronic ticket ID, electronic ticket posses- 
sion ID, ticket owner public key, and electronic ticket 
possession certificate issuing date and time. A digital 
signature is placed by the electronic ticket issuer on the 
electronic ticket possession certificate 1018. 
[0087] The network service program 1019 is a pro- 
gram for controlling the electronic wallet when the net- 
work electronic ticket 1 003 is used to receive network 
information service from the information server 1 03, and 
consists of program modules for generating and 
processing messages to receive network information 
service, updating the ticket, changing the service status, 
generating request information, etc. Each module is 
called by the corresponding script embedded in the start 
page data 1016 and is executed. 
[0088] The bookmark list 1020 is a list indicating the 
ID of information retained locally (in the EEPROM 404) 
and a pointer to the local address (address on the EEP- 
ROM 404). Whenever new information is retained, a 
new ID and pointer are added to the list. 
[0089] The service status 1021 is information indicat- 
ing the status of the network electronic ticket 1003 and 
is list information indicating whether or not each infor- 
mation service displayed on the start page data 1016 
can be accessed from the electronic ticket, etc. 
[0090] The electronic ticket certificate 1004 is made 
up of electronic ticket ID, electronic ticket signature pub- 
lic key, electronic ticket certificate ID, electronic ticket 
issuer ID, and electronic ticket certificate issuing date 
and time. A digital signature is placed by the electronic 
ticket issuer on the electronic ticket certificate 1004. 
[0091] Next, use of the electronic ticket in the system 
will be discussed with reference to FIGS. 1, 6, 7, and 8. 
[0092] In the system, the electronic ticket stored in the 
electronic wallet in the mobile user terminal 100 is used 
by infrared communications between the mobile user 
terminal 100 and the gate terminal 101. FIG. 8 shows a 
processing procedure for using the electronic ticket. 
[0093] First, the user operates the mode switch 304 
to set the operation mode to the browser mode, and fur- 
ther calls the electronic wallet mode and selects the 
used ticket (the selected electronic ticket is displayed 
on the LCD 303 as in FIG. 6) with the function switch 
307 (F1 or F2). Next, the user selects "TICKET CHECK- 
ING" in FIG. 6 and points the infrared communication 
port 300 at the gate terminal 101 installed at the en- 
trance of the movie theater or the event place and press- 
es the execution switch 311. Then, the mobile user ter- 
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minal 100 transmits a ticket checking processing re- 
quest 801 of the selected ticket to the gate terminal 101. 
If the gate terminal 101 checks that the information of 
the selected ticket contained in the received ticket 

5 checking processing request 801 is valid, it returns an 
electronic ticket change request 802 to the mobile user 
terminal 100. The electronic ticket change request 802 
is a request for placing the ticket undergoing the ticket 
checking processing in "ticket checked" state to inhibit 

10 later use of the ticket and changing the ticket ID. Upon 
reception of the electronic ticket change request 802, 
the mobile user terminal 100 performs electronic ticket 
change processing and transmits an electronic ticket 
change completion message 803 to the gate terminal 

15 101. Upon reception of the electronic ticket change com- 
pletion message 803, the gate terminal 101 returns a 
ticket checking completion message 804 to the mobile 
user terminal 100. When the mobile user terminal 100 
receives the ticket checking completion message 804, 

20 the ticket checking processing of the electronic ticket is 
now complete. At this time, the status of the electronic 
ticket status 1 005 indicating whether or not the electron- 
ic ticket is available is set to "unavailable " and the con- 
tent display of the electronic ticket is changed from 

25 "TICKET CHECKING" to "TICKET CHECKED." 

[0094] Next, the network information service provided 
in the system will be discussed. 
[0095] FIG. 9 shows a processing procedure for re- 
ceiving the network information service. 

30 [0096] To receive the network information service, 
first the user operates the mode switch 304 to set the 
operation mode to the browser mode and displays the 
electronic ticket with the function switch 307 (F1 or F2) 
as shown in FIG. 6. Next, the user displays a service 

35 menu with the function switch 307 (F3 or F4) (FIG. 12). 
If the user selects "NETWORK SERVICE" out of the 
service menu, the electronic wallet of the mobile user 
terminal 100 displays a network service menu on the 
LCD 303 of the mobile user terminal 100 based on the 

40 start page data 1 01 6 of the electronic ticket (start page 
display 900) (FIG. 13). For example, if the user selects 
"MAP" (network service request operation 901), the 
electronic wallet of the mobile user terminal 100 gener- 
ates a prompting message of authentication processing 

45 of the electronic ticket or an authentication request mes- 
sage 902 and transmits the message through the mobile 
user terminal 1 00 to the information server 1 03 indicated 
by the URL information embedded corresponding to 
"MAP" in the start page data 1016. 

50 [0097] Upon reception of the authentication request 
message 902, first the information server 103 checks to 
see if the contents of the authentication request mes- 
sage 902 are valid. If the authentication request mes- 
sage 902 is valid, the information server 103 returns a 

55 message indicating that the electronic ticket has been 
authenticated or an authentication message 903 to the 
mobile user terminal 100. 

[0098] Next, upon reception of the authentication 



EP1 069 539 A2 



9 



17 

message 903, the electronic wallet of the mobile user 
terminal 100 checks to see if the contents of the authen- 
tication message 903 are valid. If the authentication 
message 903 is valid, the electronic wallet generates 
information indicating which service the information 5 
server 103 is requested to provide, namely, a request 
information message 904 and transmits the message to 
the information server 1 03 through the mobile user ter- 
minal 100. 

[0099] Upon reception of the request information 
message 904, the information server 103 checks to see 
if the contents of the request information message 904 
are valid. If the request information message 904 is val- 
id, the information server 103 returns a message con- 
taining relevant information corresponding to the user's 
request or a relevant information message 905 to the 
mobile user terminal 100. 

[0100] Upon reception of the relevant information 
message 905, the electronic wallet of the mobile user 
terminal 100 checks to see if the contents of the relevant 
information message 905 are valid. If the relevant infor- 
mation message 905 is valid, the electronic wallet uses 
the browser program to display the relevant information 
in the relevant information message 905 (relevant infor- 
mation display 906) (FIG. 16). 
[0101] Next, the messages transferred between the 
electronic wallet of the mobile user terminal 1 00 and the 
information server 103 in FIG. 9 will be discussed with 
reference to FIG. 11. 

[0102] The authentication request message 902 is 
made up of a header 1100 indicating that the message 
is an authentication request message 902, issuing date 
and time 1101 indicating the date and time at which the 
authentication request message 902 was issued, a ses- 
sion ID 1102 used in common in one session between 
the mobile user terminal 100 and the information server 
103, an electronic ticket code 1103 of code information 
indicating the electronic ticket type, an electronic ticket 
ID 1104 unique to each electronic ticket, a user terminal 
ID 1105 unique to each mobile user terminal 100 as 
hardware, and an electronic ticket possession certificate 
1 1 06 issued from the ticket issuer at the electronic ticket 
purchasing time. A digital signature is placed on the 
header 1100, the issuing date and time 1101, the ses- 
sion ID 1102, the electronic ticket code 1103, the elec- 
tronic ticket ID 1104, and the user terminal ID 1105 with 
the ticket owner secret key 1017 obtained from the ticket 
issuer at the electronic ticket purchasing time. The au- 
thentication request message 902 is generated by the 
corresponding program module in the network service 
program 1019 in accordance with the network informa- 
tion service type. 

[0103] The authentication message 903 is made up 
of a header 1107 indicating that the message is an au- 
thentication message 903, issuing date and time 1108 
indicating the date and time at which the authentication 
message 903 was issued, a session ID 1109, an authen- 
tication code 11 1 0 of code information indicating that the 
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electronic ticket and the mobile user terminal 100 have 
been authenticated based on the received authentica- 
tion request message 902, and an information server 
certificate 1111 certifying that the information server 103 
is valid. A digital signature is placed on the header 11 07, 
the issuing date and time 1108, the session ID 1109, and 
the authentication code 1110 with the information server 
secret key, and the entire message is sealed with the 
ticket owner public key. 

[01 04] The request information message 904 is made 
up of a header 1112 indicating that the message is a 
request information message 904, issuing date and time 
1113 indicating the date and time at which the request 
information message 904 was issued, a session ID 
1114, an electronic ticket ID 1104, a user terminal ID 
1105, and request information 1115 indicating what in- 
formation the user requests. The request information 
1115 is generated by the corresponding program mod- 
ule in the network service program 1019 in accordance 
with the network information service type. A digital sig- 
nature is placed on the entire message with the ticket 
owner secret key 1017 and further the entire message 
is sealed with the information server public key. The re- 
quest information message 904 is generated by the cor- 
responding program module in the network service pro- 
gram 1019 in accordance with the network information 
service type. 

[0105] The relevant information message 905 is 
made up of a header 1116 indicating that the message 
is a relevant information message 905, issuing date and 
time 1117 indicating the date and time at which the rel- 
evant information message 905 was issued, a session 
ID 1118, relevant information 1119 retrieved from the da- 
tabase based on the request information 1115 in the re- 
quest information message 904, and an instruction code 
1120 of code information of a change instruction of the 
service status 1021. A digital signature is placed on the 
entire message with the information server public key 
and further the entire message is sealed using the ticket 
owner public key. 

[0106] Next, processing in message exchange be- 
tween the electronic wallet of the mobile user terminal 
100 and the information server 103 will be discussed in 
detail. 

[01 07] If the user selects "NETWORK SERVICE" in a 
state in which the electronic ticket service menu is dis- 
played, the electronic wallet of the mobile user terminal 
100 displays the network service menu based on the 
start page data 1016 of the electronic ticket (start page 
display 900) (FIG. 13). 

[0108] Further, if the user selects one network infor- 
mation service out of the network service menu (network 
service request operation 901 ), the corresponding script 
embedded in the start page data 1016 operates and the 
corresponding program module for receiving the select- 
ed information service is called form the network service 
program 1019 with the URL information as a parameter. 
The called program module first references the service 
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status 1021 and if the program module checks that the 
selected information service can be accessed, it gener- 
ates an authentication request message 902. The mo- 
bile user terminal 100 connects to the digital public net- 
work 104 and transmits the authentication request mes- 
sage 902 to the information server 103 indicated by the 
URL corresponding to the selected information service. 
[0109] Upon reception of the authentication request 
message 902, the information server 103 first checks 
whether or not the received electronic ticket possession 
certificate 11 06 is valid, next uses the received electron- 
ic ticket possession certificate 1106 to check that the 
digital signatures placed on the header 11 00, the issuing 
date and time 1101, the session ID 1102, the electronic 
ticket code 1103, the electronic ticket ID 1104, and the 
user terminal ID 1105 are valid. Upon completion of 
checking the signatures, next the information server 103 
checks the header 11 00, the issuing date and time 1101, 
the session ID 1102, and the electronic ticket code 1103 
for validity. Next, the information server 103 checks 
whether or not the electronic ticket ID 1104 matches that 
written on the electronic ticket possession certificate 

1106. Next, the information server 103 checks whether 
or not the user terminal ID 1105 matches that written on 
the electronic ticket possession certificate 1106. If the 
information server 103 checks that ail are valid, it au- 
thenticates that the authentication request message 
902 is a message from the valid owner of the electronic 
ticket (mobile user terminal 100), generates an authen- 
tication message 903, and returns the message to the 
mobile user terminal 100. 

[0110] In the electronic wallet of the mobile user ter- 
minal 100 receiving the authentication message 903, 
first the program module called from the network service 
program 1019 uses the ticket owner secret key 1017 to 
open the entire sealed authentication message 903. 
Next, the information server certificate 1111 is checked 
for validity. Next, the information server certificate 1111 
is used to check whether or not the information server 
ID for providing the selected information service, em- 
bedded in the start page data 1016 is valid. Next, the 
information server certificate 1111 is used to check that 
the digital signatures placed on the header 1107, the is- 
suing date and time 1108, the session ID 1109, and the 
authentication code 1110 are valid. Next, the header 

1107, the issuing date and time 1108, and the session 
ID 1109 in the authentication message 903 are checked 
for validity. Next, the contents of the authentication code 
1110 are checked for validity. If it is checked that the 
issuing date and time 1108, the session ID 1109, and 
the authentication code 1110 are all valid, request infor- 
mation is generated and a request information message 
904 is created. The mobile user terminal 100 transmits 
the request information message 904 to the information 
server 103. 

[0111] Upon reception of the request information mes- 
sage 904, first the information server 103 opens the en- 
tire sealed message with the information server secret 



20 

key. Next, the information server 1 03 uses the electronic 
ticket possession certificate 1106 to check whether or 
not the digital signature placed on the message is valid. 
Next, the information server 103 checks the header 

5 1112, the issuing date and time 1113, and the session 
ID 1114 for validity. Next, the information server 103 
checks whether or not the electronic ticket ID 1104 and 
the user terminal ID 1105 match those written on the 
electronic ticket possession certificate 11 06. If the infor- 

10 mation server 103 checks that all are valid, then it re- 
trieves the corresponding relevant information from the 
database based on the contents of the received request 
information 1115. Upon completion of the retrieval, the 
information server 103 creates a relevant information 

15 message 905 and returns the message to the mobile 
user terminal 100. 

[0112] In the electronic wallet of the mobile user ter- 
minal 100 receiving the relevant information message 
905, first the program module called from the network 
20 service program uses the ticket owner secret key 1017 
to open the entire sealed message. Next, the informa- 
tion server certificate 1111 is used to check the digital 
signatures placed on the entire message for validity. 
Next, the header 1116, the issuing date and time 1117, 
25 and the session ID 1118 are checked for validity. If it is 
checked that all are valid, then the service status 1021 
is changed based on the contents of the instruction code 
11 20. The service status 1 021 may be unchanged. Next, 
the browser program is used to display the received rel- 
30 evant information 1 1 1 9 on the display section of the mo- 
bile user terminal 100 (FIG. 14). 
[0113] The processing performed in the electronic 
wallet of the mobile user terminal 100 and the informa- 
tion server 103 for receiving the network information 
35 service has been described in detail. 

[0114] In the network information service, the authen- 
tication processing between the mobile user terminal 
100 and the information server 103 by exchanging the 
authentication request message 902 and the authenti- 
40 cation message 903 may be skipped in the information 
services not requiring specification of accessible per- 
sons, such as MAP, PUBLIC TRANSPORT INFORMA- 
TION, or WEATHER FORECAST, for example, in FIG. 
13. In this case, the request information message 904 
45 and the relevant information message 905 need only be 
exchanged. In this case, the request information mes- 
sage 904 is not sealed with the information server public 
key and the relevant information message 905 is not 
sealed with the ticket owner public key. 
50 [0115] If the user selects SAVE in FIG. 14, the current 
page data of the information being read and its URL in- 
formation are saved in the user area 502 of the EEP- 
ROM 404. The title of the information (identification in- 
formation) and the address information indicating the lo- 
55 cation of the information on the EE PROM 404 are reg- 
istered in the bookmark list 1020 of the network elec- 
tronic ticket. For example, if the user selects BOOK- 
MARK in a state in which the electronic ticket service 
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menu is displayed (FIG. 12), the information titles reg- 
istered in the bookmark list 1020 are displayed as in FIG. 

15. If the user selects desired information from among 
the information titles, the information is called from the 
EEPROM 404 based on the address information corre- 5 
sponding to the information and a screen as shown in 
FIG. 16 is displayed. If the user selects UPDATE in FIG. 

16, the information server 103 managing the information 
is accessed based on the URL information embedded 
in the page and the information is updated to the most 
recent information. When the information is updated, 
message exchange and processing between the elec- 
tronic wallet of the mobile user terminal 100 and the in- 
formation server 103 are performed in a similar manner 
to that previously described with reference to FIG. 9. 
[0116] In updating the bookmark information, the au- 
thentication processing between the mobile user termi- 
nal 100 and the information server 103 by exchanging 
the authentication request message 902 and the au- 
thentication message 903 may be skipped in the infor- 
mation services not requiring specification of accessible 
persons. In this case, the request information message 
904 and the relevant information message 905 need on- 
ly be exchanged. In this case, the request information 
message 904 is not sealed with the information server 
public key and the relevant information message 905 is 
not sealed with the ticket owner public key. 
[0117] Next, reception of navigation service to an 
event place, etc., using the network information service 
will be discussed. 

[0118] To receive the navigation service in the net- 
work information service, first the user operates the 
mode switch 304 to set the operation mode to the brows- 
er mode and displays the electronic ticket with the func- 
tion switch 307 (F1 or F2) as shown in FIG. 6. Next, the 
user displays a service menu of the ticket with the func- 
tion switch 307 (F3 or F4) (FIG. 12). If the user selects 
"NETWORK SERVICE" out of the service menu, the 
electronic wallet of the mobile user terminal 1 00 displays 
a network service menu (FIG. 13). If the user selects 
"NAVIGATION," the electronic wallet of the mobile user 
terminal 100 transmits a prompting message of authen- 
tication processing of the electronic ticket or an authen- 
tication request message 902 to the information server 
103 for providing the navigation service. 
[0119] Upon reception of the authentication request 
message 902, first the information server 103 checks to 
see if the contents of the authentication request mes- 
sage 902 are valid. If the authentication request mes- 
sage 902 is valid, the information server 103 returns a 
message indicating that the electronic ticket has been 
authenticated or an authentication message 903 to the 
mobile user terminal 100. Next, upon reception of the 
authentication message 903, the electronic wallet of the 
mobile user terminal 100 first checks to see if the con- 
tents of the authentication message 903 are valid. If the 
authentication message 903 is valid, the electronic wal- 
let transmits a request information message 904 con- 
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taining information indicating that the information server 
103 is requested to provide the navigation service and 
position information of the mobile user terminal 100 cal- 
culated by the GPS computation section 405 to the in- 
formation server 103. 

[0120] Upon reception of the request information 
message 904, the information server 103 first checks to 
see if the contents of the request information message 
904 are valid. If the request information message 904 is 
valid, the information server 1 03 returns a message con- 
taining navigation information or a relevant information 
message 905 to the mobile user terminal 100. 
[0121] Upon reception of the relevant information 
message 905, the electronic wallet of the mobile user 
terminal 100 first checks to see if the contents of the 
relevant information message 905 are valid. If the rele- 
vant information message 905 is valid, the electronic 
wallet uses the browser program to display the relevant 
information in the relevant information message 905 
(navigation information) (FIG. 18). 
[0122] Then, the navigation service in the network in- 
formation service is provided by repeating transfer of the 
request information message 904, transfer of the rele- 
vant information message 905, and display of the rele- 
vant information (relevant information display 906) be- 
tween the electronic wallet of the mobile user terminal 
100 and the information server 103 at one interval. 
[0123] FIG. 21 shows the authentication request mes- 
sage 902, the authentication message 903, the request 
information message 904, and the relevant information 
message 905 transferred between the electronic wallet 
of the mobile user terminal 100 and the information serv- 
er 103 according to the procedure in FIG. 9 at the time. 
The authentication request message 902, the authenti- 
cation message 903, and the relevant information mes- 
sage 905 are the same as those shown in FIG. 11 . 
[01 24] The request information message 904 is made 
up of a header 1112 indicating that the message is a 
request information message 904, issuing date and time 
1113 indicating the date and time at which the request 
information message 904 was issued, a session ID 
1114, an electronic ticket ID 1104, a user terminal ID 
1105, request information 1115 indicating what informa- 
tion the user requests, and position information 2100 in- 
dicating the current position of the mobile user terminal 
100 measured by the GPS computation section 405 
based on the information received at the GPS antenna 
315. The request information 1115 and the position in- 
formation 2100 are generated by the program module 
corresponding to the navigation service in the network 
service program 1019. A digital signature is placed on 
the entire message with the ticket owner secret key 
1017 and further the entire message is sealed with the 
information server public key. The request information 
message 904 is generated by the program module cor- 
responding to the navigation service in the network serv- 
ice program 1019. 

[0125] Next, processing in message exchange be- 
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tween the electronic wallet of the mobile user terminal 
100 and the information server 103 will be discussed in 
detail. 

[0126] If the user selects "NETWORK SERVICE" in a 
state in which the electronic ticket service menu is dis- 5 
played, the electronic wallet of the mobile user terminal 
100 displays the network service menu based on the 
start page data 1016 of the electronic ticket (start page 
display 900) (FIG. 13). 

[0127] Further, if the user selects NAVIGATION out of 
the network service menu (network service request op- 
eration 901), the corresponding script embedded in the 
start page data 1016 operates and the corresponding 
program module for receiving the selected navigation 
service is called form the network service program 1019 
with the URL information as a parameter. The called pro- 
gram module first references the service status 1021 
and if the program module checks that the navigation 
service can be received, it generates an authentication 
request message 902. The mobile user terminal 100 
connects to the digital public network 104 and transmits 
the authentication request message 902 to the informa- 
tion server 103 for providing the navigation service. 
[0128] Upon reception of the authentication request 
message 902, the information server 103 checks wheth- 
er or not the authentication request message 902 is val- 
id. This operation is the same as that for the authenti- 
cation request message 902 previously described with 
reference to FIG. 11 . After checking that the authentica- 
tion request message 902 is valid, the information serv- 
er 103 generates an authentication message 903, and 
returns the message to the mobile user terminal 100. 
[0129] Upon reception of the authentication message 
903, the electronic wallet of the mobile user terminal 100 
checks whether or not the authentication message 903 
is valid. This operation is the same as that for the au- 
thentication message 903 previously described with ref- 
erence to FIG. 11 . After checking that the authentication 
message 903 is valid, the electronic wallet of the mobile 
user terminal 100 generates request information 1115 
and position information 2100 and transmits a request 
information message 904 to the information server 103. 
[0130] Upon reception of the request information 
message 904, the information server 1 03 checks wheth- 
er or not the request information message 904 is valid. 
This operation is the same as that for the request infor- 
mation message 904 previously described with refer- 
ence to FIG. 11. After checking that the request infor- 
mation message 904 is valid, the information server 103 
generates a map matched with the position information 
2100 based on the contents of the received request in- 
formation 1115 and position information 2100 and cre- 
ates relevant information (navigation information) 1119. 
Then, the information server 103 returns a relevant in- 
formation message 905 containing the relevant informa- 
tion 1119 to the mobile user terminal 100. 
[0131] Upon reception of the relevant information 
message 905, the electronic wallet of the mobile user 
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terminal 100 checks whether or not the relevant infor- 
mation message 905 is valid. This operation is the same 
as that for the relevant information message 905 previ- 
ously described with reference to FIG. 11. After check- 
ing that the relevant information message 905 is valid, 
the electronic wallet changes the service status 1021 
based on the contents of the instruction code 1120. The 
service status 1021 may be unchanged. Next, the elec- 
tronic wallet uses the browser program to display the 
received relevant information (navigation information) 
1119 on the display section of the mobile user terminal 
100 (FIG. 18). 

[0132] In the electronic wallet of the mobile user ter- 
minal 100, after the relevant information (navigation in- 
formation) 1119 is displayed, at one interval, the pro- 
gram module called form the network service program 
1 01 9 again acquires the position information 21 00 of the 
current position of the mobile user terminal 100 meas- 
ured by the GPS computation section 405 based on the 
information received from the GPS satellite and creates 
a request information message 904 based on the posi- 
tion information 2100. The mobile user terminal 100 
transmits the request information message 904 to the 
information server 103. 

[0133] Upon reception of the request information 
message 904, the information server 1 03 creates a new 
relevant information message 905 from the contents of 
the new position information 2100 and returns the mes- 
sage to the mobile user terminal 100. 
[0134] Upon reception of the relevant information 
message 905, the electronic wallet of the mobile user 
terminal 100 displays new relevant information 1119 
based on the contents of the relevant information mes- 
sage 905. 

[0135] Thus, to receive the navigation service in the 
network information service, the electronic wallet of the 
mobile user terminal 1 00 and the information server 1 03 
repeat creation and transfer of the request information 
message 904, creation and transfer of the relevant in- 
formation message 905, and display of the request in- 
formation 1115 on the mobile user terminal 100 at one 
interval, thereby providing the real-time navigation for 
the user. 

[0136] The processing performed in the electronic 
wallet of the mobile user terminal 100 and the informa- 
tion server 103 for receiving the navigation service in 
the network information service has been described in 
detail. 

[0137] FIG. 30 summarizes the means (functions) of 
the electronic wallet for receiving the network informa- 
tion service. 

[0138] First, the electronic wallet has ticket storage 
means 3001 for storing network-linked electronic tickets 
containing electronic tickets and network electronic tick- 
ets. 

[01 39] The electronic wallet also has program execu- 
tion means 3002 for executing a program contained in 
the network electronic ticket. 



EP 1 069 539 A2 



75 



20 



25 



30 



35 



40 



45 



50 



13 



25 



EP 1 069 539 A2 



26 



[0140] The electronic wallet also has script execution 
means 3003 for interpreting a script for calling a program 
module contained in the start page data of the network 
electronic ticket and prompting the program execution 
means 3002 to execute the called program. 
[0141] The electronic wallet also has service request 
determination means 3004 for determining whether or 
not the information server is to be requested to provide 
network information service based on the information 
contained in the network electronic ticket indicating 
whether or not the network information service provided 
by the network electronic ticket can be provided. 
[0142] The electronic wallet also has message gen- 
eration means 3005 for generating a message ex- 
changed with the information server based on the pro- 
gram contained in the network electronic ticket. 
[0143] The electronic wallet also has authentication 
means 3006 for requesting the information server to per- 
form authentication processing of the network electronic 
ticket. 

[0144] The electronic wallet also has electronic signa- 
ture check means 3007 for checking whether or not the 
electronic signature placed on the information acquired 
from the information server is valid. 
[0145] The electronic wallet also has information 
service reception means 3008 for receiving the network 
information service from the information server 1 03 via 
communication means of the mobile user terminal 100. 
[0146] The electronic wallet also has information re- 
tention means 3009 for controlling storage of informa- 
tion provided by the network information service. 
[0147] The electronic wallet also has display and se- 
lection means 3010 for displaying the information con- 
tained in the electronic ticket and the information re- 
ceived from the information server on the display section 
of the mobile user terminal and selecting the user-spec- 
ified entry. 

[0146] The electronic wallet also has bookmark 
means 3011 for registering the identification information 
of the information provided by the network information 
service in the network electronic ticket used at the time. 
[0149] The electronic wallet also has ticket informa- 
tion update means 3012 for updating the service status 
of the electronic ticket and the network electronic ticket 
based on the information received from the information 
server. 

[01 50] The electronic wallet is stored in the ROM 402 
or the EEPROM 404. The means of the electronic wallet 
are also executed in association with the CPU, the RAM, 
etc., of an IC card of the mobile user terminal. 
[0151] The "bookmark" recorded on the network elec- 
tronic ticket can be used as follows: 
[01 52] For example, if the electronic ticket is an event 
ticket, the user selects the MAP menus item and uses 
the map information service to display the map of the 
event place. At this time, the user makes the range and 
the scale of the map easy to see and registers in the 
bookmark. In doing so, if the user selects the registered 



bookmark later, the map easy to see can be displayed 
directly for the user. 

[01 53] The bookmark is thus recorded on the network 
electronic ticket, whereby a high value can be added to 

5 the electronic ticket. 

[0154] Information as to whether or not a service re- 
quest can be accepted is recorded on the network elec- 
tronic ticket as the service status, whereby it is made 
possible for the service provider to control the use of the 

10 network service for each user. For example, if the elec- 
tronic ticket is a business ticket of the Shinkansen a re- 
served seat of which can be acquired, when the user 
uses the network service to acquire a reserved seat, the 
service status is changed and it is made impossible to 

15 receive the "reserved seat acquisition" service with the 
ticket. 

[0155] For example, if the electronic ticket is a concert 
ticket, as the user uses several network services, the 
service status is changed, enabling the user to listen to 

20 an interview of the artist or access a special site. After 
the concert ends, the service status is changed, ena- 
bling the user to access a network service that cannot 
be accessed before the concert is held and listen to an 
interview of the artist after the concert. 

25 [01 56] The service status is thus recorded on the net- 
work electronic ticket, whereby it is made possible to de- 
fine the use mode of the network service in response to 
the status of the electronic ticket, and a high value can 
be added to the electronic ticket. 

30 [0157] As described above, in the embodiment, 

the network electronic ticket is provided in the net- 
work-linked electronic ticket, whereby the network infor- 
mation service can be received directly from the elec- 
tronic ticket. 

35 [0158] As the data structure of the network electronic 
ticket, the start page data, the electronic ticket posses- 
sion certificate, and the network service program are 
provided and further a script for prompting execution of 
a network service program is embedded in the start 

40 page data, whereby it is made possible to safely receive 
the network information service from the electronic tick- 
et; the convenience of the user can be enhanced. 
[01 59] The mobile user terminal (electronic wallet) for 
storing the network-linked electronic ticket having the 

45 described functions is provided with the means for exe- 
cuting the described functions of the network-linked 
electronic ticket, whereby it is made possible to safely 
receive the network information service from the elec- 
tronic ticket; the convenience of the user can be en- 

50 hanced. 

(Second embodiment) 

[01 60] In a second embodiment of the invention, add- 
55 ing and updating of information in an electronic ticket 
through network information service will be discussed. 
[0161] Specifically, acquiring of a reserved seat 
through network information service after a ticket having 
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no seat information is purchased in an electronic ticket 
of a conveyance, an event, a movie theater, etc., will be 
discussed. 

[0162] FIG. 19 shows a procedure of acquiring a re- 
served seat. 5 
[0163] To acquire a reserved seat in the network in- 
formation service, first the user operates the mode 
switch 304 to set the operation mode to the browser 
mode and displays the electronic ticket with the function 
switch 307 (F1 or F2) as shown in FIG. 6. Next, the user f0 
displays a service menu of the ticket with the function 
switch 307 (F3or F4) (FIG. 12). If the user selects "NET- 
WORK SERVICE" out of the service menu, the electron- 
ic wallet of the mobile user terminal 100 displays a net- 
work service menu (FIG. 13). If the user selects "RE- is 
SERVED SEAT ACQUISITION," the electronic wallet of 
the mobile user terminal 1 00 transmits a prompting mes- 
sage of authentication processing of the electronic ticket 
or an authentication request message 902 to the infor- 
mation server 103. 20 
[0164] Upon reception of the authentication request 
message 902, first the information server 103 checks to 
see if the contents of the authentication request mes- 
sage 902 are valid. If the authentication request mes- 
sage 902 is valid, the information server 103 returns a 25 
message indicating that the electronic ticket has been 
authenticated or an authentication message 903 to the 
mobile user terminal 100. 

[0165] Upon reception of the authentication message 
903, the electronic wallet of the mobile user terminal 1 00 30 
first checks to see if the contents of the authentication 
message 903 are valid. If the authentication message 

903 is valid, the electronic wallet transmits information 
indicating that the information server 103 is requested 

to provide reserved seat acquisition service, namely, a 35 
request information message 904 to the information 
server 103. 

[0166] Upon reception of the request information 
message 904, the information server 103 first checks to 
see if the contents of the request information message 40 

904 are valid. If the request information message 904 is 
valid, the information server 103 retrieves seat informa- 
tion from the database for managing reserved seats, 
creates relevant information (vacant seat information), 
and returns a message containing the vacant seat infor- 45 
mation or a relevant information message 905 to the mo- 
bile user terminal 100. 

[0167] Upon reception of the relevant information 
message 905, the electronic wallet of the mobile user 
terminal 100 first checks to see if the contents of the so 
relevant information message 905 are valid. If the rele- 
vant information message 905 is valid, the electronic 
wallet uses the browser program to display the relevant 
information in the relevant information message 905 
(vacant seat information) (FIG. 17). 55 
[0168] The user selects any desired seat based on the 
displayed vacant seat information (desired seat selec- 
tion operation 1900) (function key 307 and execution 
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key 311 ). The electronic wallet of the mobile user termi- 
nal 100 transmits a message containing the user's de- 
sired seat information based on the user's selection or 
a desired information message 1901 to the information 
server 103. 

[0169] Upon reception of the desired information 
message 1901, the information server 103 first checks 
to see if the desired information message 1901 is valid. 
If the desired information message 1901 is valid, the in- 
formation server 103 performs seat acquisition process- 
ing based on the contents of the desired information and 
returns a message indicating completion of the seat ac- 
quisition processing, namely, an acknowledgement in- 
formation message 1902 to the mobile user terminal 
100. 

[01 70] Upon reception of the acknowledgement infor- 
mation message 1902, the electronic wallet of the mo- 
bile user terminal 100 first checks to see if the acknowl- 
edgement information message 1902 is valid. If the ac- 
knowledgement information message 1902 is valid, the 
electronic wallet displays the updated vacant seat infor- 
mation based on the information in the acknowledge- 
ment information message 1 902 for the user (acknowl- 
edgement information display 1903). 
[0171] Next, the messages will be discussed. 
[0172] The authentication request message 902, the 
authentication message 903, the request information 
message 904, and the relevant information message 
905 have the same data structures as those shown in 
FIG. 11. 

[0173] As shown in FIG. 20, the desired information 
message 1901 is made up of a header 2000 indicating 
that the message is a desired information message 904, 
issuing date and time 2001 indicating the date and time 
at which the desired information message was issued, 
a session ID 2002, an electronic ticket ID 2003, a user 
terminal ID 2004, and desired information 2005 indicat- 
ing the user's desired seat. The desired information 
2005 is generated by the program module correspond- 
ing to the reserved seat acquisition service in the net- 
work service program 1019. A digital signature is placed 
on the entire message with the ticket owner secret key 
1017 and further the entire message is sealed with the 
information server public key. The desired information 
message 1 901 is generated by the program module cor- 
responding to the reserved seat acquisition service in 
the network service program 1019. 
[0174] The acknowledgement information message 
1902 is made up of a header 2006 indicating that the 
message is an acknowledgement information message 
1 902, issuing date and time 2007 indicating the date and 
time at which the acknowledgement information mes- 
sage 1902 was issued, a session ID 2008, acknowledg- 
ment information 2009 indicating whether or not the us- 
er's desired seat can be acquired (available), update 
ticket information 2010 for updating the reservation in- 
formation 1015 of the ticket, and an instruction code 
2011 of code information of a change instruction of the 



EP 1 069 539 A2 



15 



29 

service status 1021. A digital signature is placed on the 
entire message with the information server secret key 
and further the entire message is sealed with the ticket 
owner public key. 

[0175] If the acquisition of the seat is established, the 
reservation information 1015 of the ticket displayed for 
the user is updated to the update ticket information 20 1 0 
by the program module corresponding to the reserved 
seat acquisition service, called from the network service 
program 1019. 

[0176] Next, processing in message exchange be- 
tween the electronic wallet of the mobile user terminal 
100 and the information server 103 will be discussed in 
detail. 

[0177] If the user selects "NETWORK SERVICE" in a 
state in which the electronic ticket service menu is dis- 
played, the electronic wallet of the mobile user terminal 
100 displays the network service menu based on the 
start page data 1016 of the electronic ticket (start page 
display 900) (FIG. 13). 

[0178] Further, if the user selects "RESERVED SEAT 
ACQUISITION" out of the network service menu (net- 
work service request operation 901 ), the corresponding 
script embedded in the start page data 1016 operates 
and the program module corresponding to the reserved 
seat acquisition service is called form the network serv- 
ice program 1019 with the URL information as a param- 
eter. The called program module first references the 
service status 1021 and if the program module checks 
that the reserved seat acquisition service can be ac- 
cessed, it generates an authentication request message 

902. The mobile user terminal 1 00 connects to the digital 
public network 104 and transmits the authentication re- 
quest message 902 to the information server 103 indi- 
cated by the URL corresponding to the reserved seat 
acquisition service. 

[0179] Upon reception of the authentication request 
message 902, the information server 103 checks wheth- 
er or not the authentication request message 902 is val- 
id. This operation is the same as that for the authenti- 
cation request message 902 previously described with 
reference to FIG. 11 . After checking that the authentica- 
tion request message 902 is valid, the information serv- 
er 103 generates an authentication message 903, and 
returns the message to the mobile user terminal 100. 
[0180] Upon reception of the authentication message 

903, the electronic wallet of the mobile user terminal 1 00 
checks whether or not the authentication message 903 
is valid. This operation is the same as that for the au- 
thentication message 903 previously described with ref- 
erence to FIG. 11 . After checking that the authentication 
message 903 is valid, the electronic wallet of the mobile 
user terminal 100 creates a request information mes- 
sage 904 and transmits the message to the information 
server 1 03. 

[0181] Upon reception of the request information 
message 904, the information server 1 03 checks wheth- 
er or not the request information message 904 is valid. 
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This operation is the same as that for the request infor- 
mation message 904 previously described with refer- 
ence to FIG. 11. Next, the information server 103 re- 
trieves the seat information from the database based on 

s the contents of the received request information 111, 
generates relevant information (vacant seat informa- 
tion), creates a relevant information message 905, and 
returns the message to the mobile user terminal 100. 
[0182] Upon reception of the relevant information 

10 message 905, the electronic wallet of the mobile user 
terminal 100 checks to see if the relevant information 
message 905 is valid. This operation is the same as that 
for the relevant information message 905 previously de- 
scribed with reference to FIG. 11. Next, the electronic 

15 wallet of the mobile user terminal 1 00 changes the serv- 
ice status 1021 based on the contents of the instruction 
code 1120. The service status 1021 may be unchanged. 
Next, the electronic wallet uses the browser program to 
display the received relevant information (vacant seat 

20 information) 1119 on the display section of the mobile 
user terminal 100 (FIG. 17). 

[01 83] In relevant information display 906, the mobile 
user terminal 100 displays a screen as shown in FIG. 
17. The user selects any desired seat and selects "CON- 

25 FIRM" in FIG. 17, whereby in the electronic wallet of the 
mobile user terminal 100, the program module corre- 
sponding to the reserved seat acquisition service, called 
form the network service program 1019 generates de- 
sired information and creates a desired information 

30 message 1901 and the mobile user terminal 100 trans- 
mits the desired information message 1901 to the infor- 
mation server 103. 

[0184] Upon reception of the desired information 
message 1901, the information server 103 first opens 

35 the sealed message with the information server secret 
key and checks the digital signature for validity with the 
ticket owner public key. Next, the information server 103 
checks the header 2000, the issuing date and time 2001 , 
and the session ID 2002 for validity. Next, the informa- 

40 tion server 103 uses the electronic ticket possession 
certificate 1108 to check the electronic ticket ID 2003 
and the user terminal ID 2004 for validity. If the informa- 
tion server 103 checks that all are valid, then it performs 
seat acquisition processing for the specified vacant seat 

45 based on the desired information 2005. Next, the infor- 
mation server 103 creates an acknowledgement infor- 
mation message 1902 and returns the message to the 
mobile user terminal 100. 

[0185] In the electronic wallet of the mobile user ter- 
50 minal 100 receiving the acknowledgement information 
message 1902, the program module corresponding to 
the reserved seat acquisition service, called from the 
network service program 1019 first opens the sealed 
message with the ticket owner secret key 1017 and 
55 checks the digital signature for validity with the informa- 
tion server public key. Next, the header 2005, the issuing 
date and time 2006, and the session ID 2007 are 
checked for validity. Next, the contents of the acknowl- 
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edgement information 2007 are checked for validity. If it 
is checked that all are valid, then the reservation infor- 
mation 1015 in the shown electronic ticket 1002 of the 
network-linked electronic ticket 1000 is updated based 
on the received update ticket information 2008. 5 
[0186] Since the information of the seat number, etc., 
is not described on the original electronic ticket, the ac- 
quired seat information to be added is written in the up- 
date ticket information 2008 and only the acquired seat 
information in the update ticket information 2008 is add- 
ed to the reservation information 1015 in the shown 
electronic ticket 1 002 of the original network-linked elec- 
tronic ticket 1000. The service status 1021 is changed 
to "inaccessible" to the reserved seat acquisition serv- 
ice. The electronic wallet of the mobile user terminal 1 00 
displays a new page indicating how seats are vacant on 
the display section of the mobile user terminal 100. 
[0187] The procedure of adding, updating a part of the 
information in the shown electronic ticket for receiving 
the reserved seat acquisition service of the network in- 
formation service has been described. In this case, the 
ticket information update means 3012 of the electronic 
wallet updates the service status 1021 and the reserva- 
tion information 1015 of the electronic ticket based on 
the information received from the information server. 
[0188] As described above, in the embodiment, in ad- 
dition to the advantages provided in the first embodi- 
ment, it is made possible to safely change the informa- 
tion in the electronic ticket through the network informa- 
tion service, whereby specifically it is made possible to 
acquire a reserved seat through the network information 
service after a ticket having no seat information is pur- 
chased; the convenience of the user can be enhanced. 
Thus, a large practical advantage can be provided. 

(Third embodiment) 

[0189] In a third embodiment of the invention, to ac- 
quire a reserved seat through network information serv- 
ice after an electronic ticket having no seat information 
of a conveyance, an event, a movie theater, etc., is pur- 
chased, a system for reissuing an electronic ticket with 
a seat reserved from a service server will be discussed. 
[01 90] First, FIG. 25 shows the data structure of a net- 
work-linked electronic ticket in the embodiment. 
[0191] The data structure of a network-linked elec- 
tronic ticket shown in FIG. 25 differs from that shown in 
FIG. 10 only in shown electronic ticket 2500. This differ- 
ence will be discussed. 

[0192] The data structure in FIG. 25 is the same as 
that in FIG. 10 except that a digital signature is placed 
on the entire shown electronic ticket 2500 by the elec- 
tronic ticket issuer and except that the shown electronic 
ticket 2500 does not contain the entry of reserved infor- 
mation 1015. 

[0193] Next, reserved seat acquisition service in the 
embodiment will be discussed. 

[01 94] FIG. 23 shows a reserved seat acquisition pro- 
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cedure. An information server 103 previously possess- 
es a service server certificate and owns a service server 
public key. 

[0195] In the procedure, the operation until an elec- 
tronic wallet of a mobile user terminal 1 00 creates a de- 
sired information message 1901 and transmits the mes- 
sage to the information server 103 is the same as that 
previously described with reference to FIG. 19 in the 
second embodiment. 

[0196] Upon reception of the desired information 
message 1901, first the information server 103 checks 
to see if the contents of the desired information message 
1901 are valid. If the desired information message 1901 
is valid, the information server 103 performs seat acqui- 
sition processing based on the contents of the desired 
information and transmits a message for requesting a 
service server 102 to reissue shown electronic ticket 
2500, namely, a reissuing request message 2300 to the 
service server 102. 

[0197] Upon reception of the reissuing request mes- 
sage 2300, first the service server 102 checks to see if 
the contents of the reissuing request message 2300 are 
valid. If the reissuing request message 2300 is valid, the 
service server 102 reissues a new shown electronic tick- 
et 2500 based on the contents of the reissuing request 
message 2300, creates a reissuing message 2301 , and 
returns the message to the information server 103. 
[0198] Upon reception of the reissuing message 
2301, first the information server 103 checks to see if 
the reissuing message 2301 is valid. If the reissuing 
message 2301 is valid, the information server 103 cre- 
ates a message containing the new shown electronic 
ticket 2500 or an acknowledgement information mes- 
sage 1902 and returns the message to the mobile user 
terminal 100. 

[0199] Upon reception of the acknowledgement infor- 
mation message 1902, first the electronic wallet of the 
mobile user terminal 100 checks to see if the acknowl- 
edgement information message 1902 is valid. If the ac- 
knowledgement information message 1902 is valid, the 
electronic wallet displays the updated vacant seat infor- 
mation based on the information in the acknowledge- 
ment information message 1 902 for the user. 
[0200] Next, the messages transferred between the 
electronic wallet of the mobile user terminal 1 00 and the 
information server 103 and between the information 
server 103 and the service server 102 in FIG. 23 will be 
discussed. An authentication request message 902, an 
authentication message 903, a request information 
message 904, and a relevant information message 905 
have the same data structures as those shown in FIG. 
11. The desired information message 1901 has the 
same data structure as that shown in FIG. 20. 
[0201] In the first embodiment, as shown in FIG. 20 
(f), the acknowledgement information message 1902 
contains the update ticket information 2008 and the res- 
ervation information 1015 of the shown electronic ticket 
1002 of the electronic ticket is added according to the 
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update ticket information 2008. In the third embodiment, 
however, as shown in FIG. 22, the acknowledgement 
information message 1902 contains a new shown elec- 
tronic ticket 2204 rather than update ticket information 
1015 and upon completion of seat acquisition, the 5 
shown electronic ticket 2500 in the original electronic 
ticket is all rewritten. 

[0202] As shown in FIG. 24, the reissuing request 
message 2300 is made up of a header 2400 indicating 
that the message is a reissuing request message 2300, 10 
issuing date and time 2401 indicating the date and time 
at which the reissuing request message 2300 was is- 
sued, a session ID 2402, an electronic ticket ID 2403, a 
user terminal ID 2404, a reissuing request 2405 contain- 
ing seat information after seat acquisition processing, 15 
and an information server certificate 2409. A digital sig- 
nature is placed on the header 2400, the issuing date 
and time 2401 , the session ID 2402, the electronic ticket 
ID 2403, the user terminal ID 2404, and the reissuing 
request 2405 with the information server secret key and 20 
further the entire message is sealed with the service 
server public key. 

[0203] As shown in FIG. 24, the reissuing message 
2301 is made up of a header 2406 indicating that the 
message is a reissuing message 2301 , issuing date and 25 
time 2407 indicating the date and time at which the re- 
issuing message 2301 was issued, a session ID 2408, 
and a new shown electronic ticket ID 2204 containing 
acquired seat information, issued from the service serv- 
er 102. A digital signature is placed on the entire mes- 30 
sage with the service server secret key and further the 
entire message is sealed with the information server 
public key. 

[0204] Next, processing in message exchange be- 
tween the electronic wallet of the mobile user terminal 35 
100 and the information server 1 03 and between the in- 
formation server 103 and the service server 102 will be 
discussed in detail. 

[0205] Processing of creation and transfer of the au- 
thentication request message 902, creation and transfer to 
of the authentication message 903, creation and trans- 
fer of the request information message 904, creation 
and transfer of the relevant information message 905, 
creation and transmission of the desired information 
message 1901 is similar to processing in the second 45 
embodiment. 

[0206] Upon reception of the desired information 
message 1901, first the information server 103 opens 
the sealed entire message with the information server 
secret key and checks the digital signature for validity 50 
with the ticket owner public key. Next, the information 
server 103 checks the header 2000, the issuing date 
and time 2001, and the session ID 2002 for validity. 
Next, the information server 103 uses electronic ticket 
possession certificate to check the electronic ticket ID 55 
2003 and the user terminal ID 2004 for validity. If it is 
checked that ail are valid, then the information server 
103 performs seat acquisition processing for the speci- 
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fied vacant seat. Next, the information server 103 cre- 
ates a reissuing request message 2300 and transmits 
the message to the service server 102. 
[0207] Upon reception of the reissuing request mes- 
sage 2300, first the service server 102 opens the mes- 
sage with the service server secret key. Next, the serv- 
ice server 102 checks information server certificate 
1109 for validity. Next, the service server 102 checks 
whether or not the digital signatures placed on the head- 
er 2400, the issuing date and time 2401 , the session ID 
2402, the electronic ticket ID 2403, the user terminal ID 
2404, and the reissuing request 2405 are valid with the 
information server public key. Next, the service server 

102 checks the header 2400 and the issuing date and 
time 2401 for validity. Next, the service server 102 
checks the electronic ticket ID 2403 and the user termi- 
nal ID 2404 for validity. If it is checked that all are valid, 
then the service server 102 reissues a shown electronic 
ticket 2404 of the electronic ticket containing seat infor- 
mation based on the contents of the reissuing request 
2405 and the electronic ticket ID 2403. Next, the service 
server 102 creates a reissuing message 2301 and re- 
turns the message to the information server 103. 
[0208] Upon reception of the reissuing message 
2301, the information server 103 opens the message 
with the information server secret key and checks the 
digital signature placed on the entire message for valid- 
ity with the service server public key. Next, the informa- 
tion server 1 03 checks the header 2406, the issuing date 
and time 2407, and the session ID 2408 for validity. If it 
is checked that all are valid, then the information server 

103 creates an acknowledgment information message 
1902 using the new shown electronic ticket 2408 in the 
reissuing message 2401 and returns the message to the 
mobile user terminal 100. 

[0209] In the electronic wallet of the mobile user ter- 
minal 100 receiving the acknowledgement information 
message 1902, the program module corresponding to 
the reserved seat acquisition service, called from the 
network service program 1019 opens the sealed mes- 
sage with the ticket owner secret key 1017 and checks 
the digital signature placed on the entire message for 
validity with the information server public key. Next, the 
header 2200, the issuing date and time 2201, and the 
session ID 2202 are checked for validity. Next, the ac- 
knowledgement information 2203 is checked for validity. 
If it is checked that all are valid, then the shown elec- 
tronic ticket of the original electronic ticket 1000 is over- 
written with the reissued shown electronic ticket 2204 
and the electronic ticket is updated to that containing the 
seat information. Next, service status 1021 is changed 
to "inaccessible" to the reserved seat acquisition service 
based on the contents of an instruction code 2205. Next, 
new vacant seat information is displayed on the display 
section of the mobile user terminal 100 based on the 
new shown electronic ticket. 

[0210] The processing in the embodiment has been 
described in detail. In this case, ticket information up- 
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date means 3012 of the electronic wallet updates the 
service status 1021 and the electronic ticket based on 
the information received from the information server. 
[0211] As described above, in the embodiment, the 
program module in the network service program 1019 
of the network electronic ticket rewrites the entire shown 
electronic ticket 2500 in the network-linked electronic 
ticket 1000, whereby the reserved seat acquisition serv- 
ice can be provided. 

[0212] The differences between the second and third 
embodiments will be discussed. 
[0213] Since the second embodiment provides the 
method of rewriting the reservation information 1015 in 
the network service program 1019 of the network-linked 
electronic ticket 1000 in FIG. 10, a digital signature is 
not placed on the reservation information 1015 of the 
shown electronic ticket 1002 by the ticket issuer. In this 
case, the data amount of data communications conduct- 
ed by the mobile user terminal 100 is small, thus if the 
mobile user terminal 100 has a low terminal capability, 
namely, the communication speed is low, etc., the meth- 
od of the second embodiment may be used. 
[0214] In contrast, as shown in FIG. 25, the third em- 
bodiment provides the method of rewriting all the shown 
electronic ticket 2500 of the network-linked electronic 
ticket 1000 on which the digital signature is placed by 
the ticket issuer. In this case, illegal tampering, etc., on 
the network in data communications can be prevented 
because of the digital signature and security is im- 
proved. Thus, if the importance of the changed ticket 
information is high, for example, when the seat type of 
reserved seat to be acquired is expensive and tamper- 
ing, etc., must be prevented absolutely, the method of 
the third embodiment may be used. 

(Fourth embodiment) 

[0215] In a fourth embodiment of the invention, to re- 
ceive network information service, the program module 
called from the network service program 1 01 9 of the net- 
work electronic ticket 1003 in the first, second, and third 
embodiments is down loaded from a service server 102. 
The system configuration is the same as that of the first, 
second, or third embodiment (FIG. 1). 
[0216] An electronic wallet of a mobile user terminal 
1 00 executes a program module down loaded from the 
service server 102 as in the first, second, and third em- 
bodiments for receiving network information service 
from an information server. At the termination of the net- 
work information service, the down-loaded program 
module is discarded (the down-loaded program module 
is erased from RAM 403). The data size of a network 
service program 1019 of a network electronic ticket 
1003 can be lessened as much as the program module 
down loaded from the service server 102. Thus, the em- 
bodiment is useful to provide network information serv- 
ice not frequently used or network information service 
that can be used only once, for example, reserved seat 



acquisition service. 

[0217] Applying the embodiment to reserved seat ac- 
quisition service will be discussed. 
[021 8] An information service name of "reserved seat 

5 acquisition," URL information of an information server 
for providing the information service, URL information 
of a reserved seat acquisition module, program module 
to be down loaded, and a service server ID of a service 
server 102 for providing the reserved seat acquisition 

10 module are embedded in display information concern- 
ing the reserved seat acquisition service in start page 
data 1 01 6 of the network electronic ticket 1 003. Further, 
a script for calling a down load module of a program 
module for down loading and executing a program mod- 

15 ule from the network is embedded. 

[0219] If the user selects "RESERVED SEAT ACQUI- 
SITION" out of a network service menu (FIG. 13), the 
electronic wallet of the mobile user terminal 100 exe- 
cutes the script concerning the reserved seat acquisition 

20 service in the start page data 1016 and calls the down 
load module with the URL information of the information 
server and the URL information of the reserved seat ac- 
quisition module as parameters. The electronic wallet of 
the mobile user terminal 100 executes the down load 

25 module, connects to the service server 1 02 via a digital 
public network 104, down loads the reserved seat ac- 
quisition module from the service server 102, and exe- 
cutes the reserved seat acquisition module down loaded 
with the URL information of the information server as 

30 the parameter. The processing procedure of acquiring 
a reserved seat by the reserved seat acquisition module 
and the data structures of messages exchanged are the 
same as those in the second and third embodiments. 
[0220] At the time, digital signature is placed on the 

35 down-loaded reserved seat acquisition module by the 
service server 102 places with a service server secret 
key. The service server 102 transmits a service server 
certificate together with the reserved seat acquisition 
module to the mobile user terminal 1 00. In the electronic 

40 wallet of the mobile user terminal 100 receiving the re- 
served seat acquisition module and the service server 
certificate, the down load module uses the service serv- 
er certificate to check whether or not the digital signature 
placed on reserved seat acquisition module receiving 

45 program module is valid and next checks the service 
server ID for validity. The reserved seat acquisition mod- 
ule is executed only if it is checked that the digital sig- 
nature and the service server ID are valid. 
[0221] After the termination of the reserved seat ac- 

50 quisition service, the down-loaded reserved seat acqui- 
sition module is erased from the RAM 403 of the mobile 
user terminal 100. 

[0222] The electronic wallet performing the process- 
ing comprises acquired program execution means 301 3 
55 for acquiring a program from the service server and 
prompting program execution means 3002 to execute 
the acquired program in addition to the components of 
the electronic wallet in the first embodiment (FIG 30). 
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Script execution means 3003 interprets a script con- 
tained in the start page data of the network electronic 
ticket and prompts the acquired program execution 
means 3013 to execute. 

[0223] Additional information is provided for the terms 5 
used throughout the specification of the invention. First, 
the term "electronic wallet" generally used in the elec- 
tronic commerce field is used as the means or apparatus 
for retaining an electronic ticket (generic name for tick- 
ets converted into electronic form) and a network elec- io 
tronic ticket (necessary information for connecting to a 
network from a network-linked electronic ticket and re- 
ceiving information service). It refers to "means for man- 
aging/storing negotiable electronic information." Specif- 
ically, a mobile user terminal (portable terminal) or an *5 
"IC card" attached to the mobile user terminal serves 
the function. In addition, the electronic wallet may be 
provided by a "storage device," etc., in a PC. In this 
case, the program for executing the operation of the 
means in FIG. 30 or 31 is recorded on a record medium 20 
in a format readable by an electronic computer and the 
program on the record medium is read by a PC, whereby 
the electronic wallet in the PC can be provided. 
[0224] For the information server for providing net- 
work information service for the electronic wallet and 25 
providing a program for acquiring network information 
service, the control program of the central processing 
unit of the information server is recorded on a record 
medium in a format readable by an electronic computer 
and the program on the record medium is read by an- 30 
other information server, whereby it can be converted 
into the information server forming a network-linked 
electronic ticket system. 

[0225] For the concepts of the "electronic ticket" and 
the "network electronic ticket," the "electronic ticket" is 35 
a generic name for electronic information having a ne- 
gotiable securities character that can be installed for 
use. It also includes "electronic money." On the other 
hand, the "network electronic ticket" is account for re- 
ceiving information service and/or program information 40 
for performing data processing to receive information 
service. Both are entirely different from each other. Al- 
though the conceptual differences therebetween are de- 
scribed, the electronic ticket and the network electronic 
ticket may share data as actual installation of the net- 45 
work-linked electronic ticket. 

[0226] As described above, according to the inven- 
tion, first an electronic ticket for receiving necessary per- 
mission or service from a provider and a network elec- 
tronic ticket for accessing an information providing ap- so 
paratus via a network are provided in a network -I inked 
electronic ticket. 

[0227] Thus, it is made possible for the personal con- 
sumer to directly access the information server for pro- 
viding relevant information from the network-linked elec- 55 
tronic ticket and receive online information service; the 
convenience of the personal consumer is improved. 
[0228] Second, the network electronic ticket in the 
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network-linked electronic ticket contains display format 
information of a list of identification information of online 
information services that can be received. 
[0229] Thus, the personal consumer can easily know 
the online information services that can be received and 
it is made possible for the personal consumer to easily 
receive desired network information service by selecting 
its identification information without previously knowing 
the location of the information providing apparatus on 
the network; the convenience of the personal consumer 
is improved. 

[0230] Third, the network electronic ticket in the net- 
work-linked electronic ticket contains a certificate de- 
scribing the identification information of the network- 
linked electronic ticket and the network-linked electronic 
ticket storage terminal. 

[0231 ] Thus, the personal consumer need not register 
his or her ID or password for the provider and need not 
enter the ID or password each time and safety is en- 
hanced and the convenience of the personal consumer 
is also improved. The service provider need not provide 
a database for managing the information of the regis- 
tered membership IDs, passwords, etc., and the costs 
of the entire system can be reduced. 
[0232] Fourthly, the network electronic ticket in the 
network-linked electronic ticket is provided with control 
information of the terminal storing the network-linked 
electronic ticket in an executable format by the terminal 
storing the network-linked electronic ticket. 
[0233] Thus, it is made possible to communicate from 
the network-linked electronic ticket to an information 
providing apparatus and a ticket issuing apparatus on 
the network using the resources of the network-linked 
electronic ticket storage terminal and the communica- 
tions do not depend on the type or performance of net- 
work-linked electronic ticket storage terminal, so that the 
convenience of the personal consumer is improved. 
[0234] Fifthly, one piece of the control information is 
control information for rewriting the information in the 
electronic ticket and the information in the network elec- 
tronic ticket. 

[0235] Thus, it is made possible to acquire a reserved 
seat, etc., with safety through the online information 
service, and the convenience of the personal consumer 
is improved. 

[0236] Sixthly, one piece of the control information is 
control information for generating information ex- 
changed with the information providing apparatus. 
[0237] Thus, when a message exchanged with the in- 
formation providing apparatus is generated, the net- 
work-linked electronic ticket storage terminal cannot 
view the inside of the ticket, and safety is increased. 
[0238] Seventhly, one piece of the control information 
is control information to prompt acquiring control infor- 
mation for rewriting the information in the electronic tick- 
et and the information in the network electronic ticket 
from information providing means on the network and 
executing the acquired control information. 
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[0239] Thus, it is made possible to acquire from the 
network the control information used with the online in- 
formation service accessed only once per network- 
linked electronic ticket, such as reserved seat acquisi- 
tion service, and the data amount of the network-linked 5 
electronic ticket is lessened. 

[0240] Eighthly, the display format information con- 
tains information for prompting execution of the control 
information. 

w 

[0240] 

[0241] Thus, the personal consumer selects any de- 
sired online information service out of the display format 
information, whereby the control information to receive *5 
the online information service is called, so that the op- 
erability of the personal consumer is enhanced and the 
convenience is also improved. 
[0242] Ninthly, the electronic wallet is provided with 
electronic ticket storage means, information service re- 20 
ception means, and information display means. 
[0243] Thus, it is made possible for the personal con- 
sumer to receive online information service by purchas- 
ing an electronic ticket, storing it in the electronic wallet, 
and possessing the electronic wallet; the convenience 25 
of the personal consumer is improved. 
[0244] Tenthly, the electronic wallet is provided with 
information retention means for storing the information 
provided by the online information service and identifi- 
cation registration means for registering the identifica- 30 
tion information of the information stored in the informa- 
tion retention means in the network electronic ticket 
used at the time of receiving the online information serv- 
ice. 

[0245] Thus, the personal consumer can retain the in- 35 
formation of the online information service once provid- 
ed in the electronic wallet and can directly access the 
retained information from the electronic wallet storing 
the network-linked electronic ticket; the operability of the 
personal consumer is enhanced and the convenience <o 
is also improved. 

[0246] Eleventhly, the electronic wallet is provided 
with control information execution means for executing 
the control information in the network electronic ticket. 
[0247] Thus, it is made possible for the personal con- 45 
sumer to access the online information service using the 
control information in the network electronic ticket from 
the electronic wallet; the convenience of the personal 
consumer is improved. Twelfthly, the electronic wallet is 
provided with means for rewriting the information in the so 
electronic ticket and the information in the network elec- 
tronic ticket based on the control information contained 
in the network electronic ticket. 
[0248] Thus, it is made possible for the personal con- 
sumer to access the online information service using the 55 
network electronic ticket from the electronic wallet and 
receive addition or update of the information in the elec- 
tronic ticket and the information in the network electronic 
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ticket, whereby the personal consumer can receive pro- 
vided service of reserved seat acquisition, etc.; the con- 
venience of the personal consumer is improved. 
[0249] Thirteenthly, the electronic wallet is provided 
with means for generating information exchanged with 
the information providing apparatus via the network 
based on the control information contained in the net- 
work electronic ticket. 

[0250] Thus, it is made possible for the electronic wal- 
let to generate a message exchanged with the informa- 
tion providing apparatus; the operability of the personal 
consumer is enhanced and the convenience is also im- 
proved. 

[0251] Fourteenthly, the electronic wallet is provided 
with means for prompting the electronic wallet to acquire 
control information from the information providing 
means on the network based on the control information 
contained in the network electronic ticket and execute 
the acquired control information. 
[0252] Thus, from the electronic wallet storing the net- 
work electronic ticket, it is made possible to acquire from 
the network the control information used with the online 
information service accessed only once per network- 
linked electronic ticket, such as reserved seat acquisi- 
tion service; the operability of the personal consumer is 
enhanced and the convenience is also improved. 
[0253] Fifteenthly, the electronic wallet is provided 
with means for checking whether or not the electronic 
signature placed by the information providing means on 
the acquired control information when the control infor- 
mation is acquired from the information providing means 
on the network is valid. 

[0254] Thus, it is made possible for the electronic wal- 
let to check the control information acquired from the 
information providing means for validity; safety is en- 
hanced. 

[0255] Sixteenthly, the electronic wallet is provided 
with means for interpreting information for prompting ex- 
ecution of the control information contained in the dis- 
play format information of the network electronic ticket 
and prompting the electronic wallet to execute the con- 
trol information. 

[0256] Thus, it is made possible to call the control in- 
formation in the network electronic ticket from the elec- 
tronic wallet and access the online information service; 
the convenience of the personal consumer is improved. 
[0257] Seventeenthly, the electronic wallet is provid- 
ed with means for determining whether or not the infor- 
mation providing apparatus on the network is to be re- 
quested to provide online information service based on 
the information contained in the network electronic ticket 
indicating whether or not the online information service 
provided by the network electronic ticket can [0257] 
[0258] Thus, the personal consumer can know the on- 
line information services that can be accessed from the 
network-linked electronic ticket stored in the electronic 
wallet; the convenience of the personal consumer is im- 
proved. 



EP 1 069 539 A2 



21 



41 

Claims 

1. A network-linked electronic ticket comprising at 
least one or more electronic tickets for receiving 
necessary permission, a commodity, or service 5 
from a provider and at least one or more network 
electronic tickets for receiving online information 
service from an information providing apparatus on 

a network. 

10 

2. The network-linked electronic ticket as claimed in 
claim 1 wherein the network electronic ticket con- 
tains at least one or more pieces of identification 
information of the information providing apparatus 

for providing the online information service accord- f 5 
ing to the network electronic ticket on the network. 

3. The network-linked electronic ticket as claimed in 
claim 2 wherein URL (uniform resource locator) in- 
formation is contained as the identification informa- 20 
tion. 

4. The network-linked electronic ticket as claimed in 
claim 2 or 3 wherein the network electronic ticket 
contains display format information of a list of online 25 
information services provided according to the net- 
work electronic ticket and the identification informa- 
tion is described in the display format information. 

5. The network-linked electronic ticket as claimed in 30 
claim 4 wherein the display format information is de- 
scribed in a markup language. 

6. The network-linked electronic ticket as claimed in 
any of claims 1 to 5 wherein the network electronic 35 
ticket contains at least one or more pieces of control 
information for controlling operation for receiving 
online information service from the information pro- 
viding apparatus, executed on a terminal storing the 
network-linked electronic ticket. 40 

7. The network-linked electronic ticket as claimed in 
claim 6 wherein one piece of the control information 
is control information to generate information ex- 
changed by the terminal with the information pro- 45 
viding apparatus. 

8. The network-linked electronic ticket as claimed in 
claim 6 wherein one piece of the control information 

is control information to prompt the terminal to ac- 50 
quire control information from information providing 
means on the network and execute the acquired 
control information. 

9. The network-linked electronic ticket as claimed in 55 
claim 8 wherein a digital signature is placed on the 
control information acquired from the information 
providing means by the information providing 
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means. 

10. The network-linked electronic ticket as claimed in 
claim 6 wherein one piece of the control information 
is control information for controlling rewrite of infor- 
mation in the electronic ticket or information in the 
network electronic ticket. 

11. The network-linked electronic ticket as claimed in 
any of claims 6 to 10 wherein the information to 
prompt the terminal to execute the control informa- 
tion is contained in the display format information. 

12. The network-linked electronic ticket as claimed in 
any of claims 1 to 11 wherein the network electronic 
ticket contains a certificate describing identification 
information of the network-linked electronic ticket 
and identification information of the terminal storing 
the network-linked electronic ticket. 

13. The network-linked electronic ticket as claimed in 
any of claims 1 to 1 2 wherein the network electronic 
ticket contains identification information of the infor- 
mation provided by the online information service. 

14. The network-linked electronic ticket as claimed in 
claim 13 wherein the information provided by the 
online information service is retained in the terminal 
storing the network-linked electronic ticket and an 
address of the information retained in the terminal 
is contained in the identification information. 

15. The network-linked electronic ticket as claimed in 
any of claims 1 to 14 wherein the network electronic 
ticket contains at least one or more pieces of infor- 
mation indicating whether or not the online informa- 
tion service can be provided and the information in- 
dicating whether or not the online information serv- 
ice can be provided changes with the track record 
of receiving the online information service. 

16. The network-linked electronic ticket as claimed in 
any of claims 1 to 1 5 wherein the network electronic 
ticket contains cryptography key information used 
for authentication processing with the information 
providing apparatus. 

17. An electronic wallet comprising ticket storage 
means for storing a network-linked electronic ticket 
containing an electronic ticket for receiving neces- 
sary permission, a commodity, or service from a 
provider and a network electronic ticket for receiv- 
ing online information service from an information 
providing apparatus on a network and information 
service reception means for receiving the online in- 
formation service from the information providing ap- 
paratus using the network electronic ticket. 
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18. The electronic wallet as claimed in claim 17 wherein 
said information service reception means acquires 
the online information service from the information 
providing apparatus based on URL information con- 
tained in the network electronic ticket 

19. The electronic wallet as claimed in claim 17 or 18 
further including display and selection means for 
displaying display format information of a list of on- 
line information services that can be received with 
the network electronic ticket, contained in the net- 
work electronic ticket and selecting the online infor- 
mation service to be acquired in response to oper- 
ation of the user. 

20. The electronic wallet as claimed in any of claims 17 
to 19 further including program execution means for 
executing control information to receive the online 
information service, contained in the network elec- 
tronic ticket. 

21. The electronic wallet as claimed in claim 20 includ- 
ing message generation means for generating a 
message exchanged with the information providing 
apparatus based on the control information as the 
program execution means. 

22. The electronic wallet as claimed in claim 20 includ- 
ing acquired program execution means for acquir- 
ing control information from information providing 
means on the network based on the control infor- 
mation and executing the acquired control informa- 
tion as the program execution means. 

23. The electronic wallet as claimed in claim 22 further 
including electronic signature check means for 
checking whether or not electronic signature placed 
on the control information acquired from the infor- 
mation providing means is valid. 

24. The electronic wallet as claimed in claim 20 includ- 
ing ticket information update means for rewriting in- 
formation in the electronic ticket or information in 
the network electronic ticket based on the control 
information as the program execution means. 

25. The electronic wallet as claimed in any of claims 20 
to 24 further including script execution means for 
interpreting information for prompting execution of 
control information contained in display format in- 
formation indicating a list of online information serv- 
ices of the network electronic ticket and prompting 
the program execution means to execute the con- 
trol information. 

26. The electronic wallet as claimed in any of claims 1 7 
to 25 further including authentication means for per- 
forming processing to receive authentication of the 
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network electronic ticket for the information provid- 
ing apparatus. 

27. The electronic wallet as claimed in any of claims 1 7 
5 to 26 further including bookmark means for regis- 
tering the identification information of the informa- 
tion provided by the online information service and 
address information of information retention means 
storing the information in the network electronic 

10 ticket used to acquire the online information service. 

28. The electronic wallet as claimed in any of claims 17 
to 27 further including service request determina- 
tion means for determining whether or not the infor- 
ms mation providing apparatus is to be requested to 

provide online information service based on the in- 
formation contained in the network electronic ticket 
indicating whether or not the online information 
service can be provided. 

20 

29. An information terminal comprising the functions of 
an electronic wallet as claimed in any of claims 17 
to 28 and communication means. 

25 30. An information terminal comprising an IC card com- 
prising the functions of an electronic wallet as 
claimed in any of claims 17 to 28 and communica- 
tion means. 

30 31. The information terminal as claimed in claim 29 or 
30 including radio communication means as the 
communication means. 

32. An information providing apparatus comprising 
35 communication means, information providing 

means for providing online information service for 
an information terminal as claimed in any of claims 
29 to 31 through said communication means, and 
authentication means for authenticating a network 
40 electronic ticket received from the information ter- 
minal through said communication means. 

33. An information providing apparatus comprising 
communication means and control information pro- 

45 viding means for providing control information for 
an information terminal as claimed in any of claims 
29 to 31 through said communication means. 

34. A network-linked electronic ticket system compris- 
50 ing an information terminal as claimed in any of 

claims 29 to 31 and an information providing appa- 
ratus as claimed in claim 32. 

35. A network-linked electronic ticket system compris- 
55 ing an information terminal as claimed in any of 

claims 29 to 31 , an information providing apparatus 
as claimed in claim 32, and an information providing 
apparatus as claimed in claim 33. 
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36. A control program record medium recording a con- 
trol program of an electronic wallet as claimed in 
any of claims 17 to 28 in a format readable by an 
electronic computer. 

5 

37. A control program record medium recording a con- 
trol program of a central processing unit of an infor- 
mation providing apparatus as claimed in claim 32 
in a format readable by an electronic computer. 

10 
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FIG. 2 
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FIG. 6 
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FIG. 7 



ELECTRONIC TICKET 
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FIG. 12 
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FIG. 13 
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FIG. 14 
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FIG. 15 
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FIG. 16 
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FIG. 17 
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FIG. 18 
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FIG. 22 
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FIG. 28 A 
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FIG. 29 A 
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FIG. 29B 
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